Lucene search
+L

11738 matches found

Vulnrichment
Vulnrichment
added 2025/08/14 6:22 p.m.3 views

CVE-2025-52769 WordPress flexo-social-gallery Plugin <= 1.0006 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in flexostudio flexo-social-gallery allows Cross Site Request Forgery. This issue affects flexo-social-gallery: from n/a through 1.0006...

4.3CVSS7.2AI score0.0014EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/08/14 4:28 p.m.10 views

WordPress flexo-social-gallery Plugin <= 1.0006 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin flexo-social-gallery versions = 1.0006...

4.3CVSS6.6AI score0.0014EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/08/14 11:15 a.m.6 views

CVE-2025-52721

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

6.5CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.3 views

CVE-2025-52721 WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

6.5CVSS7.1AI score0.00261EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/14 10:34 a.m.14 views

CVE-2025-52721

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

6.5CVSS4.5AI score0.00261EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/14 10:34 a.m.26 views

CVE-2025-52721

CVE-2025-52721 concerns the Global Gallery WordPress plugin (versions up to 9.2.3). It describes a Missing Authorization / Broken Access Control vulnerability enabling an unauthorized user to exploit access control misconfigurations. Public sources indicate the affected software is Global Gallery...

6.5CVSS4.5AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.14 views

CVE-2025-52721 WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

6.5CVSS0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.8 views

PT-2025-33208 · Unknown · Lcweb Global Gallery

Name of the Vulnerable Software and Affected Versions: LCweb Global Gallery versions n/d through 9.2.3 Description: A missing authorization flaw in LCweb Global Gallery allows exploitation due to incorrectly configured access control security levels. Recommendations: At the moment, there is no...

6.5CVSS6.9AI score0.00261EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.5 views

WordPress plugin flexo-social-gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

4.3CVSS6.7AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.13 views

PT-2025-33364 · Unknown · Flexo-Social-Gallery

Name of the Vulnerable Software and Affected Versions: flexostudio flexo-social-gallery versions through 1.0006 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge...

4.3CVSS6.2AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.5 views

WordPress plugin Global Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

6.5CVSS4.3AI score0.00261EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/12 2:25 p.m.12 views

CVE-2025-8811

A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely...

9.8CVSS7.7AI score0.00514EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/10 2:15 p.m.8 views

CVE-2025-8811

A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely...

9.8CVSS5.7AI score0.00514EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/10 1:32 p.m.5 views

CVE-2025-8811 code-projects Simple Art Gallery registration.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely...

7.5CVSS7.6AI score0.00514EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/10 1:32 p.m.28 views

CVE-2025-8811 code-projects Simple Art Gallery registration.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely...

7.5CVSS0.00514EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/10 1:32 p.m.37 views

CVE-2025-8811

CVE-2025-8811 affects Simple Art Gallery 1.0 (Code-Projects). The vulnerability is a SQL injection in the /Admin/registration.php file, triggered by manipulating the fname argument. It is remotely exploitable and has been publicly disclosed. Multiple sources classify the issue as critical with hi...

9.8CVSS7.6AI score0.00514EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/10 12:00 a.m.23 views

PT-2025-32485 · Unknown · Simple Art Gallery

Name of the Vulnerable Software and Affected Versions: Simple Art Gallery version 1.0 Description: A critical vulnerability exists in Simple Art Gallery 1.0 due to a SQL injection flaw. The issue is located in an unknown functionality within the /Admin/registration.php file. The fname argument ca...

9.8CVSS8.1AI score0.00514EPSS
SaveExploits1References10
Patchstack
Patchstack
added 2025/08/07 7:42 a.m.7 views

WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Global Gallery versions = 9.2.3...

6.5CVSS4.6AI score0.00261EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/08/06 2:15 a.m.9 views

CVE-2025-54611

EXTRAREFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.8AI score0.00105EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/06 2:15 a.m.8 views

CVE-2025-54611

EXTRAREFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.3CVSS0.00105EPSS
SaveExploits0References1
Rows per page
Query Builder