Lucene search
+L

99 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 11:34 a.m.•13 views

CVE-2025-22541

Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through = 5.5...

5.4CVSS7.2AI score0.00429EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:41 a.m.•17 views

CVE-2023-0402

The Social Warfare plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several AJAX actions in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete post meta...

5.4CVSS3.7AI score0.00759EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:42 a.m.•16 views

CVE-2023-48754

Cross-Site Request Forgery CSRF vulnerability in Wap Nepal Delete Post Revisions In WordPress allows Cross Site Request Forgery.This issue affects Delete Post Revisions In WordPress: from n/a through 4.6...

8.8CVSS8.5AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/03 9:31 p.m.•19 views

CVE-2025-31454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/a through = 1.1...

7.1CVSS7.2AI score0.00385EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 9:15 p.m.•14 views

CVE-2025-31454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/a through = 1.1...

7.1CVSS0.00385EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 8:58 p.m.•70 views

CVE-2025-31454

CVE-2025-31454 : Reflected XSS in the WordPress plugin Delete Post Revision (affected: Delete Post Revision

7.1CVSS7.2AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 8:58 p.m.•44 views

CVE-2025-31454 WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/a through = 1.1...

7.1CVSS0.00385EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 8:58 p.m.•8 views

CVE-2025-31454 WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/a through = 1.1...

7.1CVSS8.6AI score0.00385EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/01 4:45 p.m.•15 views

WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Delete Post Revision versions = 1.1...

7.1CVSS7AI score0.00385EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•17 views

PT-2025-14413 · Unknown · Notfound Delete Post Revision

Name of the Vulnerable Software and Affected Versions: NotFound Delete Post Revision versions n/a through 1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables an attacker ...

7.1CVSS7.1AI score0.00385EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•2 views

CVE-2025-31454: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/a through = 1.1...

7.1CVSS5.8AI score0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•12 views

WordPress plugin Delete Post Revision 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.9AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/07 4:15 p.m.•22 views

CVE-2025-22541

Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through = 5.5...

5.4CVSS0.00429EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 2:57 p.m.•125 views

CVE-2025-22541

CVE-2025-22541 concerns WP Delete Post Copies (WP Delete Post Copies plugin) by Etruel Developments LLC. The description indicates a Missing Authorization vulnerability caused by incorrectly configured access control, enabling exploitation of access level checks when deleting copies of posts. The...

5.4CVSS7.2AI score0.00429EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/07 12:48 p.m.•17 views

WordPress WP Delete Post Copies plugin <= 5.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Delete Post Copies versions = 5.5...

5.4CVSS7AI score0.00429EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•2 views

CVE-2025-22541: Missing Authorization

Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through = 5.5...

5.4CVSS5.9AI score0.00429EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•13 views

WordPress plugin WP Delete Post Copies 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8AI score0.00429EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•17 views

PT-2025-4532 · WordPress · Wp Delete Post Copies

Name of the Vulnerable Software and Affected Versions: WP Delete Post Copies versions prior to 5.5 Description: The issue is related to a missing authorization vulnerability in WP Delete Post Copies, which allows exploiting incorrectly configured access control security levels. Recommendations: F...

5.4CVSS7.1AI score0.00429EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/10/12 12:00 a.m.•18 views

PT-2024-39868 · WordPress · The Imagepress – Image Gallery

Name of the Vulnerable Software and Affected Versions: The ImagePress – Image Gallery plugin for WordPress versions prior to 1.2.3 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify data without authorization. This is due to a missing capability...

4.3CVSS6.9AI score0.0033EPSS
SaveExploits0References6
OSV
OSV
•added 2024/05/14 3:31 p.m.•9 views

CVE-2024-34191

htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the deletepost function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request...

6.5CVSS7.5AI score
SaveExploits0References3
Rows per page
Query Builder