Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-4040

Malware in sbrugna...

6.8CVSS9AI score0.04727EPSS
Exploits5References11
CNVD
CNVD
added 2015/06/12 12:0 a.m.3 views

WordPress Encrypted Contact Form plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Encrypted Contact Form plugin is a WordPress plugin that uses end-to-end encryption to send user information. A...

6.8CVSS6.5AI score0.04727EPSS
Exploits5References1
exploitpack
exploitpack
added 2015/06/10 12:0 a.m.28 views

WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery

WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL:...

6.8CVSS0.3AI score0.04727EPSS
Exploits5
Prion
Prion
added 2015/06/09 2:59 p.m.13 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the iframeurl parameter in an Update Page action in the...

6.8CVSS6.7AI score0.04727EPSS
Exploits5References9Affected Software1
Cvelist
Cvelist
added 2015/06/09 2:0 p.m.27 views

CVE-2015-4010

Cross-site request forgery CSRF vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the iframeurl parameter in an Update Page action in the...

6.4AI score0.04727EPSS
Exploits5References9
Packet Storm
Packet Storm
added 2015/06/08 12:0 a.m.34 views

WordPress Encrypted Contact Form 1.0.4 CSRF / XSS

Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site...

6.8CVSS0.3AI score0.04727EPSS
Exploits5
securityvulns
securityvulns
added 2015/06/08 12:0 a.m.107 views

CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4

Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site...

6.8CVSS0.4AI score0.04727EPSS
Exploits5
Rows per page
Query Builder