Lucene search
+L

115 matches found

Patchstack
Patchstack
added 2023/07/18 12:0 a.m.9 views

WordPress HM Resume Manager Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Software HM Resume Manager Type Plugin Vulnerable versions = 2.2 Fixed in 2.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 912793162937 Credits Rafie Muhammad Patchstack Required...

6.5AI score0.00325EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.9 views

WordPress HM Multiple Roles Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

Software HM Multiple Roles Type Plugin Vulnerable versions = 1.8 Fixed in 1.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7297b541283e Credits Rafie Muhammad Patchstack Required...

6.2AI score0.00325EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.9 views

WordPress HM Logo Showcase – Slider & Grid Plugin < 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software HM Logo Showcase – Slider & Grid Type Plugin Vulnerable versions 2.0.4 Fixed in 2.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d6a5f366444f Credits Rafie Muhammad...

6.8AI score0.00325EPSS
Exploits0References3Affected Software1
Openbugbounty
Openbugbounty
added 2023/06/30 2:39 p.m.6 views

hm-r.co.jp Cross Site Scripting vulnerability OBB-3477211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
OSV
OSV
added 2023/05/23 2:15 p.m.6 views

CVE-2023-23705

Cross-Site Request Forgery CSRF vulnerability in HM Plugin WordPress Books Gallery plugin = 4.4.8 versions...

8.8CVSS7.3AI score0.00256EPSS
Exploits0References1
NVD
NVD
added 2023/05/23 2:15 p.m.15 views

CVE-2023-23705

Cross-Site Request Forgery CSRF vulnerability in HM Plugin WordPress Books Gallery plugin = 4.4.8 versions...

8.8CVSS5.8AI score0.00256EPSS
Exploits0References1
Prion
Prion
added 2023/05/23 2:15 p.m.16 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in HM Plugin WordPress Books Gallery plugin = 4.4.8 versions...

6.8CVSS8.7AI score0.00256EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/05/23 1:3 p.m.45 views

CVE-2023-23705

CVE-2023-23705 affects the HM Plugin WordPress Books Gallery plugin, versions

8.8CVSS6.5AI score0.00256EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.8 views

PT-2023-19144 · WordPress · Hm Plugin Wordpress Books Gallery

Name of the Vulnerable Software and Affected Versions: HM Plugin WordPress Books Gallery plugin versions = 4.4.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

8.8CVSS8.8AI score0.00256EPSS
Exploits0References4
Openbugbounty
Openbugbounty
added 2023/04/27 4:26 a.m.10 views

hm.post2cl.com Cross Site Scripting vulnerability OBB-3276822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
Exploits0
NVD
NVD
added 2023/03/14 9:15 a.m.26 views

CVE-2022-47422

Cross-Site Request Forgery CSRF vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin = 3.1.5 versions...

8.8CVSS5.8AI score0.0026EPSS
Exploits0References1
OSV
OSV
added 2023/03/14 9:15 a.m.4 views

CVE-2022-47422

Cross-Site Request Forgery CSRF vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin = 3.1.5 versions...

8.8CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/03/14 9:15 a.m.24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin = 3.1.5 versions...

6.8CVSS8.8AI score0.0026EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/14 8:47 a.m.29 views

CVE-2022-47422 WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin = 3.1.5 versions...

4.3CVSS9AI score0.0026EPSS
Exploits0References1
CVE
CVE
added 2023/03/14 8:47 a.m.53 views

CVE-2022-47422

The CVE-2022-47422 entry concerns the WordPress plugin HM Plugin Accept Stripe Donation – AidWP, affected up to version 3.1.5. Connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability due to insufficient CSRF protections, enabling an attacker to induce actions via an authentica...

8.8CVSS6.5AI score0.0026EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:52 a.m.7 views

SUSE CVE-2011-2721

Off-by-one error in the clihmscan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service daemon crash via an e-mail message that is not properly handled during certain hash calculations...

5CVSS6.8AI score0.03377EPSS
Exploits0References3
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.11 views

WordPress HM Logo Showcase – Slider & Grid plugin < 1.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress HM Logo Showcase – Slider & Grid plugin versions 1.9. Solution Update the WordPress HM Logo Showcase – Slider & Grid plugin to the latest available version at least 1.9...

1.7AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.11 views

WordPress HM Testimonial – Best Testimonial Plugin for WordPress plugin <= 1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress HM Testimonial – Best Testimonial Plugin for WordPress plugin versions = 1.3. Solution Update the WordPress HM Testimonial – Best Testimonial Plugin for WordPress plugin to the latest available version...

3.2AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.13 views

WordPress HM Multiple Roles plugin < 1.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress HM Multiple Roles plugin versions 1.6. Solution Update the WordPress HM Multiple Roles plugin to the latest available version at least 1.6...

2.9AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.9 views

WordPress HM Multiple Roles plugin < 1.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress HM Multiple Roles plugin versions 1.6. Solution Update the WordPress HM Multiple Roles plugin to the latest available version at least 1.6...

1AI score
Exploits0References2Affected Software1
Rows per page
Query Builder