Lucene search
+L

1621 matches found

Prion
Prion
added 2023/06/04 2:15 p.m.28 views

Cross site request forgery (csrf)

A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of the file blogger-importer.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgradin...

6.8CVSS7AI score0.00433EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/06/04 1:31 p.m.44 views

CVE-2013-10027 Blogger Importer Plugin blogger-importer.php restart cross-site request forgery

A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of the file blogger-importer.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgradin...

5CVSS8.8AI score0.00433EPSS
SaveExploits0References3
CVE
CVE
added 2023/06/04 1:31 p.m.59 views

CVE-2013-10027

CVE-2013-10027 affects the Blogger Importer Plugin for WordPress up to version 0.5. The issue is a cross-site request forgery in the start/restart logic of blogger-importer.php, enabling remote exploitation. The fix is to upgrade to version 0.6, with the patch identified as b83fa4f862b0f19a54cfee...

8.8CVSS6.5AI score0.00433EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/06/04 12:00 a.m.15 views

WordPress plugin Blogger Importer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS5.7AI score0.00433EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/06/04 12:00 a.m.12 views

PT-2023-3567 · WordPress · Blogger Importer Plugin

Name of the Vulnerable Software and Affected Versions: Blogger Importer Plugin versions up to 0.5 Description: The issue is related to the function start/restart of the file blogger-importer.php, which is vulnerable to cross-site request forgery CSRF attacks. This can be exploited remotely,...

10CVSS4.9AI score0.00433EPSS
SaveExploits0References7
OSV
OSV
added 2023/05/22 11:15 a.m.12 views

CVE-2023-23797

Cross-Site Request Forgery CSRF vulnerability in SecondLineThemes Auto YouTube Importer plugin = 1.0.3 versions...

8.8CVSS5.8AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/22 11:15 a.m.30 views

CVE-2023-23797

Cross-Site Request Forgery CSRF vulnerability in SecondLineThemes Auto YouTube Importer plugin = 1.0.3 versions...

8.8CVSS6.5AI score0.00264EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/22 10:00 a.m.9 views

CVE-2023-23797 WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SecondLineThemes Auto YouTube Importer plugin = 1.0.3 versions...

5.4CVSS8.8AI score0.00264EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/22 10:00 a.m.61 views

CVE-2023-23797

CVE-2023-23797 affects SecondLineThemes’ WordPress plugin Auto YouTube Importer (versions

8.8CVSS7.2AI score0.00264EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/22 12:00 a.m.14 views

PT-2023-19212 · Secondlinethemes · Auto Youtube Importer

Name of the Vulnerable Software and Affected Versions: SecondLineThemes Auto YouTube Importer plugin versions 1.0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.3AI score0.00264EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/22 12:00 a.m.10 views

WordPress plugin Auto YouTube Importer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00264EPSS
SaveExploits0References2
wpexploit
wpexploit
added 2023/05/10 12:00 a.m.155 views

Directorist < 7.5.4 - Admin+ LFI

The plugin is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files. This PoC will work on Linux systems. 1. Navigate to the URL path: /wp-admin/edit.php?posttype=atbizdir&page=tools&step=2&file=/etc/passwd&delimiter=; 2.. You will be presented wit...

9.2AI score0.01342EPSS
SaveExploits2
OSV
OSV
added 2023/04/25 7:15 p.m.10 views

CVE-2023-25485

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/25 7:15 p.m.24 views

CVE-2023-25485

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/25 7:15 p.m.25 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/25 6:33 p.m.10 views

CVE-2023-25485 WordPress JSON Content Importer Plugin <= 1.3.15 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/25 6:33 p.m.51 views

CVE-2023-25485

The CVE-2023-25485 entry concerns the WordPress JSON Content Importer plugin (versions

5.9CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/25 6:33 p.m.30 views

CVE-2023-25485 WordPress JSON Content Importer Plugin <= 1.3.15 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/04/25 12:00 a.m.11 views

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2023:1966-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1966-1 advisory. - build the containerized-data-importer with a supported golang compiler bsc1208916 Tenable has extracted the preceding...

5.9AI score
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/25 12:00 a.m.16 views

WordPress plugin JSON Content Importer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References3
Rows per page
Query Builder