Lucene search
+L

5 matches found

NVD
NVD
•added 2026/05/27 7:16 a.m.•40 views

CVE-2026-8938

The auto making JSON-LD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the amJLcertification function. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS0.00184EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/27 5:31 a.m.•64 views

CVE-2026-8938 auto making JSON-LD <= 4.5.3 - Cross-Site Request Forgery to Plugin Certification Settings via Nonce Validation Bypass

The auto making JSON-LD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the amJLcertification function. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS0.00184EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2014-4686

Malware in sbrugna...

6.5CVSS8.1AI score0.02709EPSS
SaveExploits0References5
NVD
NVD
•added 2014/08/22 1:55 a.m.•35 views

CVE-2014-4767

IBM WebSphere Application Server WAS Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors...

6.5CVSS7.1AI score0.02709EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2014/08/22 1:00 a.m.•41 views

CVE-2014-4767

IBM WebSphere Application Server WAS Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors...

7.1AI score0.02709EPSS
SaveExploits0References4
Rows per page
Query Builder