Lucene search
+L

36 matches found

NVD
NVD
•added 2026/09/22 10:17 a.m.•14 views

CVE-2026-94117

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3...

7.6CVSS0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 9:13 a.m.•16 views

CVE-2026-94117 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/22 9:13 a.m.•49 views

CVE-2026-94117 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3...

7.6CVSS0.00383EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 9:13 a.m.•23 views

CVE-2026-94117

DevItems HashBar – WordPress Notification Bar plugin (versions through 2.0.3 ) is affected by a Blind SQL Injection vulnerability, caused by improper neutralization of special elements in an SQL command. The CVSS 3.1 score is 7.6 (HIGH) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L, indica...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•8 views

CVE-2026-94117: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•4 views

PT-2026-96695

Name of the Vulnerable Software and Affected Versions DevItems HashBar – WordPress Notification Bar versions prior to 2.0.4 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/08/19 12:31 a.m.•24 views

EUVD-2026-62209

Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...

8.8CVSS5.2AI score0.00201EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/18 10:17 p.m.•12 views

CVE-2026-66602

Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...

8.8CVSS0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/18 10:03 p.m.•36 views

CVE-2026-66602 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...

8.8CVSS0.00201EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/18 10:03 p.m.•55 views

CVE-2026-66602

A CSRF vulnerability (CVSS 8.8, HIGH) affects the HashBar – WordPress Notification Bar plugin through version 2.0.0, discovered by Brian Willows. An attacker can force an authenticated admin to perform unintended actions (e.g., changing settings) via a crafted link. Exploitation evidence includes...

8.8CVSS5.8AI score0.00201EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/18 10:02 p.m.•13 views

WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Brian Willows in WordPress Plugin HashBar – WordPress Notification Bar versions = 2.0.0...

8.8CVSS5.3AI score0.00201EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•17 views

PT-2026-78248

Name of the Vulnerable Software and Affected Versions HashBar – WordPress Notification Bar versions prior to 2.0.1 Description Cross-Site Request Forgery CSRF in DevItems HashBar – WordPress Notification Bar allows an attacker to induce a user to perform actions they did not intend to do. CSRF is...

8.8CVSS5.2AI score0.00201EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•0 views

CVE-2026-66602: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...

8.8CVSS5.8AI score0.00201EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-56093

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.0031EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2022-51974

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00534EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:00 a.m.•13 views

CVE-2023-51372

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification Bar: from n/a through 1.4.1...

5.9CVSS6.5AI score0.0031EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:22 a.m.•23 views

CVE-2022-4650

The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

5.4CVSS6AI score0.00534EPSS
SaveExploits2References1
OSV
OSV
•added 2023/12/29 11:15 a.m.•20 views

CVE-2023-51372

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification Bar: from n/a through 1.4.1...

4.8CVSS5.8AI score0.0031EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/29 11:15 a.m.•21 views

CVE-2023-51372

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification Bar: from n/a through 1.4.1...

5.9CVSS0.0031EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/29 11:15 a.m.•32 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification Bar: from n/a through 1.4.1...

4.3CVSS6.9AI score0.0031EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder