Lucene search
+L

34 matches found

Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.11 views

CVE-2023-30488 WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.2.7...

5.3CVSS6.9AI score0.00416EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.7 views

WordPress plugin Featured Post Creative 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

5.3CVSS8.7AI score0.00416EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.6 views

PT-2024-12240 · Unknown · Featured Post Creative +1

Name of the Vulnerable Software and Affected Versions: Featured Post Creative versions 1.2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative, which allows exploiting incorrectly configured access...

5.3CVSS9.4AI score0.00416EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/19 5:15 p.m.16 views

CVE-2024-51650

Cross-Site Request Forgery CSRF vulnerability in scottmydollarplancom Random Featured Post random-featured-post-plugin allows Stored XSS.This issue affects Random Featured Post: from n/a through = 1.1.3...

7.1CVSS0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:32 p.m.35 views

CVE-2024-51650 WordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in scottmydollarplancom Random Featured Post random-featured-post-plugin allows Stored XSS.This issue affects Random Featured Post: from n/a through = 1.1.3...

7.1CVSS0.00206EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.70 views

CVE-2024-51650

CVE-2024-51650 describes a CSRF-induced Stored XSS in the WordPress plugin Random Featured Post (versions

7.1CVSS5.9AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.9 views

WordPress plugin Random Featured Post 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS6.5AI score0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.10 views

PT-2024-34795 · Unknown · Random Featured Post

Name of the Vulnerable Software and Affected Versions: Random Featured Post versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

7.1CVSS6.8AI score0.00206EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/11/01 10:41 a.m.9 views

WordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Random Featured Post versions = 1.1.3...

7.1CVSS5.9AI score0.00206EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/01 12:0 a.m.17 views

WordPress Random Featured Post Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Random Featured Post Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51650 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 985c582f06c5 Credits SOPROBRO Require...

7.1CVSS6.6AI score0.00206EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/09 12:0 a.m.13 views

WordPress Featured Post Creative Plugin <= 1.4 is vulnerable to Broken Access Control

Software Featured Post Creative Type Plugin Vulnerable versions = 1.4 Fixed in 1.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID a180338dc363 Credits Abdi Pranata Require...

5.9AI score0.00188EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/04/13 12:0 a.m.14 views

WordPress Featured Post Creative Plugin <= 1.2.7 is vulnerable to Broken Access Control

Software Featured Post Creative Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30488 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6ae105faf5be Credits Cat Required privilege...

6.3AI score0.00416EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2015/05/01 12:0 a.m.11 views

WordPress Featured Post With Thumbnail Plugin <= 1.4 - Unspecified Timthumb

This plugin is prone to an Unspecified timthumb. Solution Update the plugin...

2.3AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
added 2011/01/23 12:0 a.m.10 views

WordPress Plugin WP Featured Post with Thumbnail 3.0 - src Cross-Site Scripting

WordPress Plugin WP Featured Post with Thumbnail 3.0 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/45998/info The WP Featured Post with Thumbnail Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input...

6.7AI score
SaveExploits0
Rows per page
Query Builder