Lucene search
K

5 matches found

NVD
NVD
added 2026/05/27 7:16 a.m.13 views

CVE-2026-8938

The auto making JSON-LD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the amJLcertification function. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS0.0014EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/27 5:31 a.m.30 views

CVE-2026-8938 auto making JSON-LD <= 4.5.3 - Cross-Site Request Forgery to Plugin Certification Settings via Nonce Validation Bypass

The auto making JSON-LD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the amJLcertification function. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS0.0014EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-4686

Malware in sbrugna...

6.5CVSS9AI score0.02709EPSS
Exploits0References5
NVD
NVD
added 2014/08/22 1:55 a.m.18 views

CVE-2014-4767

IBM WebSphere Application Server WAS Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors...

6.5CVSS7.1AI score0.02709EPSS
Exploits0References4
Cvelist
Cvelist
added 2014/08/22 1:0 a.m.24 views

CVE-2014-4767

IBM WebSphere Application Server WAS Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors...

7.1AI score0.02709EPSS
Exploits0References4
Rows per page
Query Builder