Lucene search
K

86 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:29 a.m.4 views

CVE-2023-49861

Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through = 2.1.3...

4.3CVSS7.3AI score0.00148EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/23 9:45 a.m.2 views

CVE-2025-62107

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

4.3CVSS5.9AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2025/12/22 10:16 a.m.3 views

CVE-2025-62107

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

4.3CVSS0.00015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/22 9:32 a.m.2 views

CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

4.3CVSS5.9AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/22 9:32 a.m.3 views

EUVD-2025-204705

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through 1.1.7...

4.3CVSS6.1AI score0.00015EPSS
Exploits0References2
CVE
CVE
added 2025/12/22 9:32 a.m.6 views

CVE-2025-62107

This CVE concerns a Cross-Site Request Forgery (CSRF) vulnerability in the PluginOps Feather Login Page for WordPress, affecting versions up to 1.1.7. The underlying issue allows an attacker to perform actions on behalf of an authenticated user on Feather Login Page. Concrete affected item: Feath...

4.3CVSS5.9AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/22 9:32 a.m.24 views

CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

4.3CVSS0.00015EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.2 views

WordPress plugin Feather Login Page 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.4AI score0.00015EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.2 views

PT-2025-52639

Name of the Vulnerable Software and Affected Versions PluginOps Feather Login Page versions through 1.1.7 Description A Cross-Site Request Forgery CSRF issue exists in PluginOps Feather Login Page. This allows attackers to perform actions on behalf of an unsuspecting user. Recommendations Update...

4.3CVSS6.5AI score0.00015EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/11/05 10:44 a.m.3 views

WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Feather Login Page versions = 1.1.7...

4.3CVSS6.7AI score0.00015EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-23424

Malware in sbrugna...

4.8CVSS5.1AI score0.00224EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-29781

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00226EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-34024

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00152EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-53769

Malicious code in bioql PyPI...

4.3CVSS9AI score0.00148EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-7140

Malicious code in bioql PyPI...

10CVSS9AI score0.03836EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/05/23 7:39 a.m.5 views

CVE-2024-31923

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page.This issue affects Feather Login Page: from n/a through 1.1.5...

4.3CVSS5.1AI score0.00226EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:25 a.m.5 views

CVE-2023-2547

The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions...

5.4CVSS6.4AI score0.00198EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:25 a.m.7 views

CVE-2023-2545

The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level...

8.8CVSS6.1AI score0.00152EPSS
Exploits1References1
OSV
OSV
added 2025/05/05 9:16 p.m.0 views

MAL-2025-3682 Malicious code in feather-provider-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10e095a2bc88b96e5a1f9fabb7eefe0ff0596b0e3b3bf085fdcf95165c4689 Any computer that has this package installed or running should be considered...

7AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/05 9:16 p.m.2 views

Malicious code in feather-provider-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10e095a2bc88b96e5a1f9fabb7eefe0ff0596b0e3b3bf085fdcf95165c4689 Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References3
Rows per page
Query Builder