Lucene search
+L

857 matches found

Code423n4
Code423n4
added 2023/07/05 12:00 a.m.12 views

User can brick collateralization ratio calculation by donating a small amount

Lines of code Vulnerability details Impact The following code is used to calculate the collateralization ratio when stablecoinsIssued 0: collatRatio = uint64totalCollateralization.mulDivBASE9, stablecoinsIssued, Math.Rounding.Up; During normal operation, this should not overflow. However, when...

6.9AI score
SaveExploits0
NVD
NVD
added 2023/06/15 1:15 p.m.22 views

CVE-2023-25450

Cross-Site Request Forgery CSRF vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin = 2.25.1 versions...

8.8CVSS6.5AI score0.00264EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/15 1:15 p.m.31 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin = 2.25.1 versions...

6.8CVSS8.8AI score0.00264EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/06/15 12:21 p.m.69 views

CVE-2023-25450

CVE-2023-25450 refers to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress GiveWP plugin and Fundraising Platform, affecting versions

8.8CVSS7.1AI score0.00264EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/15 12:00 a.m.9 views

WordPress Plugin iveWP GiveWP–Donation Plugin and Fundraising Platform 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin iveWP...

8.8CVSS7.8AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/15 12:00 a.m.11 views

PT-2023-20070 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin versions = 2.25.1 Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actio...

8.8CVSS8.6AI score0.00264EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/05/31 12:00 a.m.11 views

WordPress Donation Platform for WooCommerce: Fundraising & Donation Management Plugin < 1.2.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Donation Platform for WooCommerce: Fundraising & Donation Management Type Plugin Vulnerable versions 1.2.10 Fixed in 1.2.10 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSI...

7AI score
SaveExploits0References2Affected Software1
Code423n4
Code423n4
added 2023/05/15 12:00 a.m.28 views

wxETH.sol Inflation Attack

Lines of code Vulnerability details Impact The first staker may suffer an Inflation Attack and lose the funds Proof of Concept Currently wxETH still has the common ERC4626 'Inflation Attack' malicious users can front-run the first staker, raise exchange rates through donations, then achieve...

7.1AI score
SaveExploits0
CVE
CVE
added 2023/05/10 10:10 a.m.46 views

CVE-2022-47441

CVE-2022-47441 affects the WordPress plugin Charitable Donations & Fundraising Team Donation Forms by Charitable, versions

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/10 12:00 a.m.11 views

Wordpress plugin Donation Forms by Charitable 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/05/04 12:00 a.m.17 views

WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations Plugin <= 2.2.7 is vulnerable to SQL Injection

Software Cryptocurrency Donation Box – Bitcoin & Crypto Donations Type Plugin Vulnerable versions = 2.2.7 Fixed in 2.2.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-32128 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 2fba65309901 Credits Mika...

7.2CVSS6.8AI score0.00723EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/05/03 3:15 p.m.24 views

CVE-2023-23785

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DgCult Exquisite PayPal Donation plugin = v2.0.0 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/03 3:15 p.m.7 views

CVE-2023-23785

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DgCult Exquisite PayPal Donation plugin = v2.0.0 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/03 3:15 p.m.20 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DgCult Exquisite PayPal Donation plugin = v2.0.0 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/03 2:12 p.m.37 views

CVE-2023-23785 WordPress Exquisite PayPal Donation Plugin <= v2.0.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DgCult Exquisite PayPal Donation plugin = v2.0.0 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/03 2:12 p.m.46 views

CVE-2023-23785

CVE-2023-23785 is a Stored Cross-Site Scripting (XSS) vulnerability in the DgCult Exquisite PayPal Donation WordPress plugin, affecting versions

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/03 12:00 a.m.7 views

PT-2023-19199 · Unknown · Dgcult Exquisite Paypal Donation Plugin

Name of the Vulnerable Software and Affected Versions: DgCult Exquisite PayPal Donation plugin versions prior to 2.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/05/03 12:00 a.m.11 views

WordPress plugin Exquisite PayPal Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/04/24 12:00 a.m.11 views

WordPress Woocommerce Tip/Donation Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Tip/Donation Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28783 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID db97e6af212a Credits Yuki Haruma Requir...

5.9CVSS6AI score0.00358EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/04/14 12:00 a.m.17 views

WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paytm Payment Donation Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A8: Cross Site Request Forgery CSRF Classification Cross Site Request Forgery CSRF CVE CVE-2023-28535 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 0cde2dab29f5 Credits...

7.1CVSS7.1AI score0.00382EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder