CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

RedhatCVE•added 2025/05/22 5:13 p.m.•17 views

CVE-2020-8658

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In this...

8.8CVSS7AI score0.09918EPSS

SaveExploits2References1

NVD•added 2020/02/06 3:15 a.m.•34 views

CVE-2020-8658

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In...

8.8CVSS8.7AI score0.09918EPSS

SaveExploits2References3

CVE•added 2020/02/06 2:19 a.m.•150 views

CVE-2020-8658

The CVE concerns WordPress plugin BestWebSoft Htaccess (

8.8CVSS8.6AI score0.09918EPSS

SaveExploits2References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by