Lucene search
K

1606 matches found

Vulnrichment
Vulnrichment
added 2024/11/09 2:19 p.m.12 views

CVE-2024-51606 WordPress Blrt WP Embed plugin <= 1.6.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows SQL Injection.This issue affects Blrt WP Embed: from n/a through = 1.6.9...

8.5CVSS5.9AI score0.00533EPSS
Exploits0References1
CVE
CVE
added 2024/11/09 2:19 p.m.47 views

CVE-2024-51606

The CVE-2024-51606 vulnerability affects the WordPress plugin Blrt WP Embed, version

8.8CVSS5.9AI score0.00533EPSS
Exploits0References1Affected Software1
GithubExploit
GithubExploit
added 2024/11/09 7:46 a.m.80 views

Exploit for CVE-2024-50473

CVE-2024-50473 Ajar in5 Embed = 3.1.3 - Unauthenticated Ar...

10CVSS9.8AI score0.01033EPSS
Exploits1
NVD
NVD
added 2024/11/09 5:15 a.m.7 views

CVE-2024-10814

The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the cegetfile function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originati...

6.4CVSS0.00309EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/11/09 4:32 a.m.19 views

CVE-2024-10814 Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery

The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the cegetfile function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originati...

6.4CVSS0.00309EPSS
Exploits0References3
CVE
CVE
added 2024/11/09 4:32 a.m.44 views

CVE-2024-10814

Technical details about CVE-2024-10814 are not provided in the supplied documents. Monitor official advisories for updates on affected products, impact, and fixes.

6.4CVSS6.3AI score0.00309EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.4 views

WordPress plugin Code Embed 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

6.4CVSS8.1AI score0.00309EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.3 views

PT-2024-34748 · WordPress · Blrt Wp Embed

Name of the Vulnerable Software and Affected Versions: Blrt WP Embed versions 1.6.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper handling of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

8.8CVSS8.2AI score0.00533EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.1 views

WordPress plugin Blrt WP Embed SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.8CVSS7.8AI score0.00533EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/08 10:51 p.m.3 views

WordPress Code Embed plugin <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery vulnerability

Authenticated Contributor+ Server-Side Request Forgery vulnerability discovered by Max Boll b0lli in WordPress Plugin Code Embed versions = 2.5...

6.4CVSS7.2AI score0.00309EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 4:20 p.m.3 views

WordPress Embed documents shortcode plugin <= 1.5 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Embed documents shortcode versions = 1.5...

6.5CVSS5.8AI score0.00285EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.12 views

WordPress Code Embed Plugin <= 2.5 is vulnerable to Server Side Request Forgery (SSRF)

Software Code Embed Type Plugin Vulnerable versions = 2.5 Fixed in 2.5.1 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-10814 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 4cf23fa82f5e Credits Max Boll b0lli Required privilege...

6.4CVSS6.9AI score0.00309EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.13 views

WordPress Embed documents shortcode Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)

Software Embed documents shortcode Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51904 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 13d94824e115 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00285EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/08 12:0 a.m.4 views

PT-2024-16571 · WordPress · Code Embed

Name of the Vulnerable Software and Affected Versions: Code Embed plugin for WordPress versions up to 2.5 Description: The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery via the ce get file function. This makes it possible for authenticated attackers, with...

6.4CVSS7.1AI score0.00309EPSS
Exploits0References18
RedHat Linux
RedHat Linux
added 2024/11/07 3:26 p.m.4 views

firefox: thunderbird: Permission leak via embed or object elements

The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...

7.5CVSS7.2AI score0.00611EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2024/11/07 3:23 p.m.3 views

firefox: thunderbird: Permission leak via embed or object elements

The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...

7.5CVSS7.2AI score0.00611EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2024/11/07 3:23 p.m.4 views

firefox: thunderbird: Permission leak via embed or object elements

The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...

7.5CVSS7.2AI score0.00611EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2024/11/07 3:19 p.m.1 views

firefox: thunderbird: Permission leak via embed or object elements

The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...

7.5CVSS7.2AI score0.00611EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2024/11/07 3:13 p.m.3 views

firefox: thunderbird: Permission leak via embed or object elements

The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...

7.5CVSS7.2AI score0.00611EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2024/11/04 2:3 a.m.5 views

firefox: thunderbird: Permission leak via embed or object elements

The Mozilla Foundation's Security Advisory: A permission leak could occur from a trusted site to an untrusted site via embed or object elements...

7.5CVSS7.2AI score0.00611EPSS
Exploits0References10
Rows per page
Query Builder