CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11789 matches found

CNNVD•added 2021/12/13 12:00 a.m.•9 views

WordPress 插件路径遍历漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A path traversal vulnerability exists in the WordPress...

7.2CVSS5.6AI score0.05898EPSS

SaveExploits2References2

Openbugbounty•added 2021/12/09 6:59 a.m.•14 views

crossdressingpicturegallery.com Improper Access Control vulnerability OBB-2297108

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0

CNVD•added 2021/12/09 12:00 a.m.•52 views

WordPress Photo Gallery by 10Web plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Photo Gallery by 10Web plugin before 1.5.68 has a cross-site scripting vulnerability, which stems fro...

6.1CVSS2.2AI score0.00884EPSS

SaveExploits1References1

OSV•added 2021/12/06 4:15 p.m.•12 views

CVE-2021-25041

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting XSS issues via the bwgalbumbreadcrumb0 and shortcodeid GET parameters passed to the bwgfrontenddata AJAX action...

6.1CVSS5.8AI score0.00884EPSS

SaveExploits1References2

ATTACKERKB•added 2021/12/06 4:15 p.m.•4 views

CVE-2021-25041

6.1CVSS6.5AI score0.00884EPSS

SaveExploits1References3

NVD•added 2021/12/06 4:15 p.m.•35 views

CVE-2021-25041

6.1CVSS0.00884EPSS

SaveExploits1References2

Prion•added 2021/12/06 4:15 p.m.•36 views

Cross site scripting

4.3CVSS6AI score0.00884EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2021/12/06 3:55 p.m.•46 views

CVE-2021-25041 Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)

6.2AI score0.00884EPSS

SaveExploits1References2

CVE•added 2021/12/06 3:55 p.m.•84 views

CVE-2021-25041

The CVE-2021-25041 entry concerns the Photo Gallery by 10Web WordPress plugin and its vulnerability to Reflected Cross-Site Scripting (XSS) in WordPress. Affected component is the bwg_frontend_data AJAX action, with exploitation via GET parameters bwg_album_breadcrumb_0 and shortcode_id passed to...

6.1CVSS5.9AI score0.00884EPSS

SaveExploits1References2Affected Software1

zdt•added 2021/12/04 12:00 a.m.•1000 views

WordPress All-in-One Video Gallery plugin 2.4.9 Plugin - Local File Inclusion Vulnerability

Exploit Title: WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion LFI Exploit Author: Mohamed Magdy Abumusilm Aka m19o Software: All-in-One Video Gallery plugin Version: = 2.4.9 Tested on: Windows,linux Poc:...

SaveExploits0

Packet Storm•added 2021/12/03 12:00 a.m.•412 views

WordPress All-In-One Video Gallery 2.4.9 Local File Inclusion

7.4AI score

SaveExploits0

Exploit DB•added 2021/12/03 12:00 a.m.•419 views

WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion (LFI)

5.3AI score

SaveExploits0

CNVD•added 2021/12/01 12:00 a.m.•57 views

WordPress Contest Gallery SQL Injection Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Plugin is a WordPress open source application plugin. WordPress Contest Gallery SQL injection vulnerability,...

9.8CVSS2.9AI score0.127EPSS

SaveExploits2References1

OSV•added 2021/11/29 9:15 a.m.•5 views

CVE-2021-24915

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections...

9.8CVSS5.8AI score0.127EPSS

SaveExploits2References2

ATTACKERKB•added 2021/11/29 9:15 a.m.•8 views

CVE-2021-24915

9.8CVSS7.3AI score0.127EPSS

SaveExploits2References4

Cvelist•added 2021/11/29 8:25 a.m.•32 views

CVE-2021-24915 Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure

9.9AI score0.127EPSS

SaveExploits2References2

CVE•added 2021/11/29 8:25 a.m.•93 views

CVE-2021-24915

The Contest Gallery WordPress plugin (prior to 13.1.0.6) lacks capability checks and does not sanitise/escape cg-search-user-name-original before using it in a SQL statement when exporting gallery users, enabling unauthenticated SQL injection and disclosure of all usernames and email addresses. T...

9.8CVSS9.7AI score0.127EPSS

SaveIn wildExploits2References2Affected Software1

CNNVD•added 2021/11/29 12:00 a.m.•13 views

WordPress SQL注入漏洞

9.8CVSS6AI score0.127EPSS

SaveExploits2References3

ATTACKERKB•added 2021/11/23 8:15 p.m.•5 views

CVE-2021-24882

The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and Gallery "Title" fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

4.8CVSS5.9AI score0.00598EPSS

SaveExploits2References2

OSV•added 2021/11/23 8:15 p.m.•10 views

CVE-2021-24882

4.8CVSS5.8AI score0.00598EPSS

SaveExploits2References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by