Lucene search
+L

32 matches found

OSV
OSV
•added 2023/11/22 2:15 p.m.•10 views

CVE-2023-27457

Cross-Site Request Forgery CSRF vulnerability in Passionate Brains Add Expires Headers & Optimized Minify plugin = 2.7 versions...

8.8CVSS7.3AI score0.00312EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/11/13 2:37 a.m.•12 views

CVE-2023-37978 WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Dimitar Ivanov HTTP Headers.This issue affects HTTP Headers: from n/a through 1.18.11...

4.4CVSS7AI score0.00449EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/13 2:37 a.m.•52 views

CVE-2023-37978 WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Dimitar Ivanov HTTP Headers.This issue affects HTTP Headers: from n/a through 1.18.11...

4.4CVSS5.5AI score0.00449EPSS
SaveExploits0References1
OSV
OSV
•added 2023/08/05 11:15 p.m.•13 views

CVE-2023-37874

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dimitar Ivanov HTTP Headers plugin = 1.18.11 versions...

4.8CVSS7.3AI score0.00396EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/05 10:14 p.m.•92 views

CVE-2023-37874

CVE-2023-37874 affects WordPress HTTP Headers plugin versions

5.9CVSS5.3AI score0.00396EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/05 12:00 a.m.•12 views

PT-2023-26153 · Unknown · Dimitar Ivanov Http Headers

Name of the Vulnerable Software and Affected Versions: Dimitar Ivanov HTTP Headers plugin versions prior to 1.18.12 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated administrators. This vulnerability allows for malicious scripts to be...

5.9CVSS5AI score0.00396EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/08/05 12:00 a.m.•15 views

WordPress plugin HTTP Headers cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00396EPSS
SaveExploits0References2
OSV
OSV
•added 2023/05/15 1:15 p.m.•19 views

CVE-2023-1207

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability...

7.2CVSS7.3AI score0.00885EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2023/05/15 12:15 p.m.•14 views

CVE-2023-1207 HTTP Headers < 1.18.8 - Admin+ SQL Injection

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability...

8.3AI score0.00885EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/05/15 12:00 a.m.•19 views

WordPress plugin HTTP Headers SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

7.2CVSS8.1AI score0.00885EPSS
SaveExploits2References2
SUSE CVE
SUSE CVE
•added 2023/02/15 4:27 a.m.•8 views

SUSE CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.5CVSS7.3AI score0.01869EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/11 12:00 a.m.•14 views

WordPress plugin HTTP Headers 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An access control error vulnerability exist...

7.2CVSS7.5AI score0.01716EPSS
SaveExploits2References2
Rows per page
Query Builder