Lucene search
K

8173 matches found

CNNVD
CNNVD
added 2023/10/31 12:0 a.m.5 views

WordPress Plugin Contact Form Plugin - Fastest Contact Form Builder Plugin for WordPress by Fluent Forms SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Contact Form Plugin -...

9.8CVSS7.7AI score0.00585EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/10/30 12:0 a.m.12 views

WordPress iframe forms Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software iframe forms Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5073 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1839edf7170f Credits István Márton Required privileg...

6.4CVSS5.7AI score0.00403EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.12 views

PT-2023-7847 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS5AI score0.00562EPSS
Exploits0References7
Patchstack
Patchstack
added 2023/10/24 12:0 a.m.6 views

WordPress Quill Forms Plugin <= 3.3.0 is vulnerable to Broken Access Control

Software Quill Forms Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.4.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46610 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID f234d1eb3578 Credits Abdi Pranata Required privilege...

6.5AI score0.00358EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/10/16 11:15 a.m.0 views

CVE-2023-45748

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

8.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/10/16 11:15 a.m.10 views

CVE-2023-45748

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

8.8CVSS5.8AI score0.00214EPSS
Exploits0References1
Prion
Prion
added 2023/10/16 11:15 a.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

6.8CVSS8.8AI score0.00214EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/10/16 10:15 a.m.0 views

CVE-2023-45647

Cross-Site Request Forgery CSRF vulnerability in MailMunch Constant Contact Forms by MailMunch plugin = 2.0.10 versions...

8.8CVSS7.3AI score0.00208EPSS
Exploits0References1
NVD
NVD
added 2023/10/16 10:15 a.m.6 views

CVE-2023-45647

Cross-Site Request Forgery CSRF vulnerability in MailMunch Constant Contact Forms by MailMunch plugin = 2.0.10 versions...

8.8CVSS6.5AI score0.00208EPSS
Exploits0References1
Prion
Prion
added 2023/10/16 10:15 a.m.11 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in MailMunch Constant Contact Forms by MailMunch plugin = 2.0.10 versions...

6.8CVSS8.8AI score0.00208EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/16 10:1 a.m.18 views

CVE-2023-45748 WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

4.3CVSS7.1AI score0.00214EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/16 10:1 a.m.12 views

CVE-2023-45748 WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...

4.3CVSS9AI score0.00214EPSS
Exploits0References1
CVE
CVE
added 2023/10/16 10:1 a.m.51 views

CVE-2023-45748

CVE-2023-45748 affects the MailMunch MailChimp Forms by MailMunch WordPress plugin, vulnerable in versions

8.8CVSS6.4AI score0.00214EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/16 9:58 a.m.35 views

CVE-2023-45647

CVE-2023-45647 affects MailMunch Constant Contact Forms by MailMunch (WordPress plugin) ≤ 2.0.10. Root cause: Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to perform unintended actions on behalf of an authenticated user. Impact details in sources show potential hig...

8.8CVSS7AI score0.00208EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/16 9:58 a.m.15 views

CVE-2023-45647 WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch Constant Contact Forms by MailMunch plugin = 2.0.10 versions...

5.4CVSS9AI score0.00208EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/10/16 12:0 a.m.10 views

WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.27 is vulnerable to Broken Access Control

Software Contact Form builder with drag & drop - Kali Forms Type Plugin Vulnerable versions = 2.3.27 Fixed in 2.3.28 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46083 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 538b41872f6e...

6.6AI score0.00337EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/10/16 12:0 a.m.4 views

WordPress Plugin Constant Contact Forms by MailMunch Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Constant Contact Forms by MailMunch is...

8.8CVSS6.5AI score0.00208EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2023/10/16 12:0 a.m.13 views

Ninja Forms < 3.6.34 - Admin+ Stored XSS

Description The plugin does not sanitize and escape its label fields, which could allow high privilege users such as admin to perform Stored XSS attacks. Only users with the unfilteredhtml capability can perform this, and such users are already allowed to use JS in posts/comments etc however the...

4.8CVSS5.3AI score0.0062EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2023/10/16 12:0 a.m.5 views

WordPress Plugin MailChimp Forms by MailMunch Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin MailChimp Forms by MailMun...

8.8CVSS6.5AI score0.00214EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/10/16 12:0 a.m.3 views

PT-2023-29664 · Mailmunch · Mailchimp Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: MailMunch MailChimp Forms by MailMunch plugin versions = 3.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS8.8AI score0.00214EPSS
Exploits0References3
Rows per page
Query Builder