Lucene search
+L

191 matches found

CNNVD
CNNVD
•added 2023/11/06 12:00 a.m.•22 views

WordPress Plugin auto-excerpt-everywhere Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/06 12:00 a.m.•6 views

CVE-2023-46776: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

8.8CVSS7.8AI score0.00214EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/10/26 12:00 a.m.•22 views

WordPress Auto Excerpt everywhere Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Auto Excerpt everywhere Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46776 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 813fdb38dc11 Credits Nguyen Xuan Chi...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/10/25 6:17 p.m.•20 views

CVE-2023-45764

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

4.8CVSS7.3AI score0.00484EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•52 views

CVE-2023-45764

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

5.9CVSS5.4AI score0.00484EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•18 views

WordPress Plugin Scroll post excerpt cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6AI score0.00484EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/10/24 11:58 a.m.•22 views

CVE-2023-45764 WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

5.9CVSS5.6AI score0.00484EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/24 11:58 a.m.•59 views

CVE-2023-45764

CVE-2023-45764 is a stored XSS vulnerability in the Gopi Ramasamy Scroll post excerpt plugin for WordPress, affecting versions 8.0. No exploitation details are provided in the documents. Monitor for a vendor patch and apply the upgrade when available.

5.9CVSS5.1AI score0.00484EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/24 11:58 a.m.•46 views

CVE-2023-45764 WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

5.9CVSS5.5AI score0.00484EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/24 12:00 a.m.•5 views

CVE-2023-45764: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Scroll post excerpt plugin = 8.0 versions...

5.9CVSS5.6AI score0.00484EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/10/12 12:00 a.m.•25 views

WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)

Software Scroll post excerpt Type Plugin Vulnerable versions = 8.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45764 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c3a82d7d0784 Credits Rio Darmawan Required...

5.9CVSS5.7AI score0.00484EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/05/23 3:15 p.m.•42 views

CVE-2023-26011

Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/05/23 3:15 p.m.•14 views

CVE-2023-26011

Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/23 3:15 p.m.•29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/05/23 2:44 p.m.•62 views

CVE-2023-26011

CVE-2023-26011 is a CSRF vulnerability in the WordPress plugin Read More Excerpt Link (tim Eckel) for versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/23 2:44 p.m.•51 views

CVE-2023-26011 WordPress Read More Excerpt Link Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•5 views

CVE-2023-26011: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/05/23 12:00 a.m.•14 views

WordPress Plugin: "Read More" Excerpt Link – Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.1AI score0.00256EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/02/27 2:15 p.m.•16 views

CVE-2023-1068

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the readmoreexcerptlinkmenuoptions function. This makes it possible for unauthenticated attackers t...

4.3CVSS6.3AI score0.00296EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/02/27 2:15 p.m.•13 views

CVE-2023-1068

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the readmoreexcerptlinkmenuoptions function. This makes it possible for unauthenticated attackers t...

4.3CVSS6.5AI score0.00296EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder