Lucene search
+L

179 matches found

CNVD
CNVD
added 2019/08/28 12:00 a.m.10 views

WordPress search-everything plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. search-everything is a search function plugin used in it. WordPress search-everything plugin has a SQL injection vulnerability. An...

9.8CVSS8AI score0.01779EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/28 12:00 a.m.9 views

WordPress search-everything plugin SQL injection vulnerability (CNVD-2019-30597)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. search-everything is a search function plugin used in it. WordPress search-everything plugin has a SQL injection vulnerability. An...

9.8CVSS8AI score0.01872EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/22 1:15 p.m.9 views

CVE-2017-18571

The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316...

9.8CVSS5.8AI score0.01779EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/22 1:15 p.m.31 views

CVE-2017-18571

The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316...

9.8CVSS9.9AI score0.01779EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/22 1:15 p.m.9 views

CVE-2016-10917

The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316...

9.8CVSS5.8AI score0.01872EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/22 1:15 p.m.26 views

Sql injection

The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316...

7.5CVSS9.8AI score0.02129EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2019/08/22 1:15 p.m.21 views

Sql injection

The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316...

7.5CVSS8.2AI score0.02129EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/08/22 12:19 p.m.73 views

CVE-2017-18571

CVE-2017-18571 concerns the WordPress search-everything plugin before 8.1.7. Connected sources specify that this plugin has an SQL injection vulnerability related to WordPress 4.7.x (a separate issue from CVE-2014-2316). The CVSS data in the initial document indicates network access, no authentic...

9.8CVSS9.7AI score0.01779EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/22 12:19 p.m.32 views

CVE-2017-18571

The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316...

9.9AI score0.01779EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/08/22 12:18 p.m.30 views

CVE-2016-10917

The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316...

9.9AI score0.01872EPSS
SaveExploits0References1
CVE
CVE
added 2019/08/22 12:18 p.m.72 views

CVE-2016-10917

The CVE-2016-10917 entry corresponds to the WordPress plugin search-everything, vulnerable before version 8.1.6. The issue is an SQL injection when search strings are empty, as described in the initial document. Connected sources reinforce the affected component (search-everything plugin for Word...

9.8CVSS9.7AI score0.01872EPSS
SaveExploits0References1Affected Software1
Malwarebytes
Malwarebytes
added 2018/04/26 3:36 p.m.86 views

The Internet of Everything and digital privacy: what you need to know

If you don’t already own Internet of Things IoT devices, you likely will soon. IoT-enabled devices are physical gadgets with built-in Internet connectivity that allow data transmission; often this happens in the background with no indication to the user that anything is happening. The IoT is more...

1AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2017/03/20 12:00 a.m.19 views

Search Everything < 8.1.7 - SQL Injection

The Search Everything WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS2.5AI score0.01779EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2016/06/10 12:00 a.m.23 views

Search Everything < 8.1.6 - SQL Injection

The Search Everything WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS2.5AI score0.01872EPSS
SaveExploits0Affected Software1
hackapp
hackapp
added 2016/04/01 9:22 a.m.12 views

Note Everything - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application Note Everything published at the 'play' market has multiple vulnerabilities...

1.4AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:59 a.m.17 views

Search Everything 7.0.2 - search-everything.php s Parameter SQL Injection

The Search Everything WordPress plugin was affected by a search-everything.php s Parameter SQL Injection security vulnerability...

7.5CVSS2.7AI score0.02129EPSS
SaveExploits1References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.15 views

The Everything Development System <= Pre-1.0 - SQL Injection Vuln

No description provided by source. Application: The Everything Development System Versions: = Pre-1.0 current version at time of release Author: sub [email protected] Released: 2/1/2008 There exists a vulnerability in The Everything Development Engine that allows a user to inject their own SQL to...

7.1AI score
SaveExploits0
NVD
NVD
added 2014/05/22 3:13 p.m.26 views

CVE-2014-3843

Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7.2AI score0.00952EPSS
SaveExploits0References2
Prion
Prion
added 2014/05/22 3:13 p.m.33 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7.7AI score0.00952EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2014/05/22 3:00 p.m.38 views

CVE-2014-3843

Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

7.2AI score0.00952EPSS
SaveExploits0References2
Rows per page
Query Builder