Lucene search
+L

110157 matches found

CVE
CVE
•added 2023/11/12 11:09 p.m.•53 views

CVE-2023-27436

CVE-2023-27436 is a CSRF vulnerability in the WordPress plugin Elegant Custom Fonts, affecting versions

8.8CVSS7.1AI score0.00301EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/12 11:09 p.m.•37 views

CVE-2023-27436 WordPress Elegant Custom Fonts Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

5.4CVSS9AI score0.00301EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/11/12 11:09 p.m.•9 views

CVE-2023-27436 WordPress Elegant Custom Fonts Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

5.4CVSS7.1AI score0.00301EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/12 10:11 p.m.•54 views

CVE-2023-28420

CVE-2023-28420 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Custom Options Plus by Leo Caseiro, affecting versions ≤ 1.8.1 . The issue is a CSRF flaw that could allow unauthorized actions on behalf of an authenticated user. Public documentation lists this as...

8.8CVSS7.1AI score0.00301EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/12 10:11 p.m.•38 views

CVE-2023-28420 WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Leo Caseiro Custom Options Plus plugin = 1.8.1 versions...

5.4CVSS9AI score0.00301EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/12 12:00 a.m.•11 views

WordPress Plugin custom-options-plus Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/12 12:00 a.m.•1 views

CVE-2023-27436: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Louis Reingold Elegant Custom Fonts plugin = 1.0 versions...

8.8CVSS7.9AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/12 12:00 a.m.•0 views

CVE-2023-28420: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Leo Caseiro Custom Options Plus plugin = 1.8.1 versions...

8.8CVSS7.8AI score0.00301EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/12 12:00 a.m.•12 views

PT-2023-21707 · WordPress · Leo Caseiro Custom Options Plus

Name of the Vulnerable Software and Affected Versions: Leo Caseiro Custom Options Plus plugin versions prior to 1.8.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS8.5AI score0.00301EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/11/12 12:00 a.m.•10 views

WordPress Plugin Elegant Custom Fonts Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/09 9:15 p.m.•12 views

CVE-2023-32739

Cross-Site Request Forgery CSRF vulnerability in WebTrendy WP Custom Cursors | WordPress Cursor Plugin plugin 3.2 versions...

8.8CVSS5.8AI score0.00277EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/09 9:15 p.m.•22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WebTrendy WP Custom Cursors | WordPress Cursor Plugin plugin 3.2 versions...

6.8CVSS7.2AI score0.00277EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/09 8:56 p.m.•27 views

CVE-2023-32739 WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebTrendy WP Custom Cursors | WordPress Cursor Plugin plugin 3.2 versions...

4.3CVSS9AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/09 8:56 p.m.•87 views

CVE-2023-32739

CVE-2023-32739 concerns the Web_Trendy WP Custom Cursors (WordPress Cursor Plugin) vulnerable in versions prior to 3.2 to Cross-Site Request Forgery (CSRF). The NVD entry lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, low attack complexity, and user interaction required, a...

8.8CVSS8.9AI score0.00277EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/11/09 12:00 a.m.•40 views

NewStart CGSL MAIN 6.06 : containerd.io Multiple Vulnerabilities (NS-SA-2023-0139)

The remote NewStart CGSL host, running version MAIN 6.06, has containerd.io packages installed that are affected by multiple vulnerabilities: - runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes...

7AI score0.00448EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2023/11/09 12:00 a.m.•14 views

WordPress Plugin WP Custom Cursors | WordPress Cursor Plugin Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.6AI score0.00277EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/09 12:00 a.m.•21 views

PT-2023-23986 · WordPress · Web Trendy Wp Custom Cursors

Name of the Vulnerable Software and Affected Versions: Web Trendy WP Custom Cursors | WordPress Cursor Plugin versions prior to 3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.4AI score0.00277EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2023/11/09 12:00 a.m.•26 views

WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Woo Custom and Sequential Order Number Type Plugin Vulnerable versions = 2.6.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47687 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ba7c776b1e8 Credit...

8.8CVSS6.6AI score0.00277EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•0 views

CVE-2023-32739: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebTrendy WP Custom Cursors | WordPress Cursor Plugin plugin 3.2 versions...

8.8CVSS7.8AI score0.00277EPSS
SaveExploits0References2
OSV
OSV
•added 2023/11/08 6:41 p.m.•18 views

CLSA-2023-1699468875 Fix CVE(s): CVE-2022-48560

SECURITY UPDATE: posible crash in heapq with custom comparison operators - debian/patches/CVE-2022-48560.patch: disallow releasing heap items during a comparison callback - CVE-2022-48560...

7.5CVSS6.9AI score0.01771EPSS
SaveExploits1References1
Rows per page
Query Builder