Lucene search
K

34 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-9336

Malware in sbrugna...

8.8CVSS8.6AI score0.00779EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-50335

Malicious code in bioql PyPI...

6.1CVSS7AI score0.00083EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-19865

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:35 a.m.5 views

CVE-2024-22304

Cross-Site Request Forgery CSRF vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For WordPress: from n/a through 2.3.2...

8.8CVSS8.5AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:52 a.m.4 views

CVE-2023-46074

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Borbis Media FreshMail For WordPress plugin = 2.3.2 versions...

6.1CVSS5.8AI score0.00083EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:39 a.m.3 views

CVE-2015-9496

The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FMform id=' substring...

8.8CVSS8AI score0.00779EPSS
Exploits2References1
NVD
NVD
added 2024/01/31 1:15 p.m.10 views

CVE-2024-22304

Cross-Site Request Forgery CSRF vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For WordPress: from n/a through 2.3.2...

8.8CVSS6.3AI score0.00051EPSS
Exploits0References1
OSV
OSV
added 2024/01/31 1:15 p.m.1 views

CVE-2024-22304

Cross-Site Request Forgery CSRF vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For WordPress: from n/a through 2.3.2...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2024/01/31 1:15 p.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For WordPress: from n/a through 2.3.2...

6.8CVSS7.2AI score0.00051EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/31 12:15 p.m.21 views

CVE-2024-22304 WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For WordPress: from n/a through 2.3.2...

5.4CVSS8.9AI score0.00051EPSS
Exploits0References1
CVE
CVE
added 2024/01/31 12:15 p.m.72 views

CVE-2024-22304

CVE-2024-22304 is a CSRF vulnerability in the FreshMail For WordPress plugin by Borbis Media, affecting versions up to 2.3.2. The connected PatchStack entry indicates the vulnerability is unpatched (no fix available yet) and requires unauthenticated access. Public exploit details are not provided...

8.8CVSS8.5AI score0.00051EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 12:15 p.m.4 views

CVE-2024-22304 WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For WordPress: from n/a through 2.3.2...

5.4CVSS6.3AI score0.00051EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/01/31 12:0 a.m.2 views

PT-2024-19326 · WordPress · Freshmail For Wordpress

Name of the Vulnerable Software and Affected Versions: FreshMail For WordPress versions through 2.3.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...

8.8CVSS8.8AI score0.00051EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/01/31 12:0 a.m.1 views

WordPress plugin FreshMail For WordPress Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.5AI score0.00051EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2024/01/24 12:0 a.m.19 views

FreshMail For WordPress <= 2.3.2 - Cross-Site Request Forgery

Description The FreshMail For WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.2. This is due to missing nonce validation function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged...

8.8CVSS6.2AI score0.00051EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/01/17 12:0 a.m.5 views

WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software FreshMail For WordPress Type Plugin Vulnerable versions = 2.3.2 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2024-22304 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5469e612590a Credits Skalucy...

8.8CVSS6.6AI score0.00051EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/10/26 12:15 p.m.1 views

CVE-2023-46074

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Borbis Media FreshMail For WordPress plugin = 2.3.2 versions...

6.1CVSS7.3AI score
Exploits0References1
CNNVD
CNNVD
added 2023/10/26 12:0 a.m.0 views

WordPress Plugin FreshMail Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6AI score0.00083EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/10/26 12:0 a.m.2 views

PT-2023-29826 · Borbis Media · Borbis Media Freshmail For Wordpress

Name of the Vulnerable Software and Affected Versions: Borbis Media FreshMail For WordPress plugin versions = 2.3.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

6.1CVSS6.3AI score0.00083EPSS
Exploits0References6
Patchstack
Patchstack
added 2023/10/16 12:0 a.m.6 views

WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)

Software FreshMail For WordPress Type Plugin Vulnerable versions = 2.3.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46074 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID bc13c89450f9 Credits LEE SE HYOU...

6.1CVSS5.6AI score0.00083EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder