Lucene search
+L

7231 matches found

Cvelist
Cvelist
added 2023/07/11 12:29 p.m.37 views

CVE-2023-25443 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS6.8AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 12:29 p.m.59 views

CVE-2023-25443

CVE-2023-25443 is a CSRF vulnerability in the WordPress Button Generator – easily Button Builder plugin, affecting versions

6.5CVSS5.5AI score0.0022EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/11 12:29 p.m.22 views

CVE-2023-25443 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS7.1AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.10 views

WordPress Plugin Button Generator – easily Button Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Button Generator - easily...

6.5CVSS7AI score0.0022EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/10 4:15 p.m.7 views

CVE-2023-37392

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

8.8CVSS7.3AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.21 views

CVE-2023-37392

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

8.8CVSS6.5AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/10 4:15 p.m.11 views

CVE-2023-1780

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS7.3AI score0.00998EPSS
SaveExploits2References1
NVD
NVD
added 2023/07/10 4:15 p.m.36 views

CVE-2023-1780

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00998EPSS
SaveExploits2References1
Prion
Prion
added 2023/07/10 4:15 p.m.20 views

Cross site scripting

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

5.8CVSS6AI score0.00998EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/07/10 3:50 p.m.28 views

CVE-2023-37392 WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

5.4CVSS9AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/10 3:50 p.m.17 views

CVE-2023-37392 WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

5.4CVSS7.1AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/10 3:50 p.m.43 views

CVE-2023-37392

CVE-2023-37392 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Dummy Content Generator, affecting versions

8.8CVSS7AI score0.00331EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.7 views

Wrodpress Plugin wp-dummy-content-generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Wrodpress Plugin...

8.8CVSS8.1AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.10 views

WordPress plugin Companion Sitemap Generator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.1CVSS6.8AI score0.00998EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/07/10 12:00 a.m.6 views

PT-2023-25944 · WordPress · Wp Dummy Content Generator

Name of the Vulnerable Software and Affected Versions: Deepak Anand WP Dummy Content Generator plugin versions prior to 2.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.8AI score0.00331EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/07/07 12:00 a.m.13 views

WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Dummy Content Generator Type Plugin Vulnerable versions = 2.3.0 Fixed in 3.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37392 Patch priority Low CVSS severity Low 5.4 Developer Deepak Anand PSID 29759436a0f1 Credits Elliot...

8.8CVSS6.6AI score0.00331EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/07 12:00 a.m.20 views

WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Broken Access Control

Software WP Dummy Content Generator Type Plugin Vulnerable versions = 2.3.0 Fixed in 3.0.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-37394 Patch priority Low CVSS severity Low 5.3 Developer Deepak Anand PSID a2db647ba0de Credits thiennv Required...

5.3CVSS6.6AI score0.00348EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/07/07 12:00 a.m.11 views

TravianZ 安全特征问题漏洞

TravianZ is a free-to-play, in-browser, web-based strategy game from German company Travian. A security vulnerability exists in TravianZ version 8.3.4, 8.3.3, which stems from a cryptographically insecure random number generator used in the password reset function allowing an attacker to guess th...

9.8CVSS8.4AI score0.00962EPSS
SaveExploits1References2
CVE
CVE
added 2023/07/07 12:00 a.m.56 views

CVE-2023-36993

The CVE concerns TravianZ 8.3.4 and 8.3.3 where the password reset function uses a cryptographically insecure random number generator. This root cause permits an attacker to guess password reset parameters and take over accounts. Public sources in connected documents corroborate the same affected...

9.8CVSS9.4AI score0.00962EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/07 12:00 a.m.13 views

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

7AI score0.00962EPSS
SaveExploits1References1
Rows per page
Query Builder