3 matches found
WordPress Kirki plugin < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions vulnerability
Unauthenticated Arbitrary Shortcode Execution via Form Email Actions vulnerability discovered by Jakub Herman in WordPress Plugin Kirki versions 6.2.1...
6.5CVSS5.3AI score0.0022EPSS
SaveExploits0References1Affected Software1
PT-2025-47340
Name of the Vulnerable Software and Affected Versions openml/openml.org web application version v2.0.20241110 Description The web application generates predictable tokens based on MD5 hashing for critical user actions, including signup confirmation, password resets, email confirmation resends, an...
7.5CVSS6.6AI score0.00591EPSS
SaveExploits1References6
20