Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2015-9312

Malware in sbrugna...

6.1CVSS6.3AI score0.01318EPSS
SaveExploits0References4
CNVD
CNVD
•added 2019/10/17 12:00 a.m.•22 views

WordPress incoming-links plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. incoming-links is a plugin for adding inbound links. A cross-site scripting vulnerability exists in the WordPress incoming-links...

6.1CVSS6.2AI score0.01318EPSS
SaveExploits0References1
Mend
Mend
•added 2019/10/10 4:13 p.m.•10 views

CVE-2015-9472

The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header...

6.1CVSS0.01318EPSS
SaveExploits0References3
CVE
CVE
•added 2019/10/10 4:13 p.m.•89 views

CVE-2015-9472

CVE-2015-9472 affects the WordPress incoming-links plugin prior to 0.9.10b, where referrers.php XSS is triggered via the Referer HTTP header. Multiple connected sources (NVD, RH, CNVD, CVE listings) confirm a cross-site scripting vulnerability in this plugin. Public details describe the flaw and ...

6.1CVSS6AI score0.01318EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/10 12:00 a.m.•9 views

CVE-2015-9472: Improper Neutralization of Input During Web Page Generation

The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header...

6.1CVSS6.3AI score0.01318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/10 12:00 a.m.•9 views

PT-2019-7431

Name of the Vulnerable Software and Affected Versions incoming-links plugin versions prior to 0.9.10b for WordPress Description The issue allows for XSS via the Referer HTTP header in the referrers.php file. Recommendations For versions prior to 0.9.10b, update to version 0.9.10b or later to...

6.1CVSS0.01318EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2015/02/01 12:00 a.m.•7 views

WordPress Incoming Links Plugin <= 0.9.9b - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via referrers.php. Solution Update the plugin...

2.7AI score
SaveExploits0References1Affected Software1
osv_debian
osv_debian
•added 2012/09/28 9:55 p.m.•22 views

DEBIAN-CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

6.8CVSS7.1AI score0.01146EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2012/09/28 12:00 a.m.•9 views

PT-2012-5406

Name of the Vulnerable Software and Affected Versions WordPress version 3.4.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboard incoming links edit action. This occurs in t...

6.8CVSS0.01146EPSS
SaveExploits1References13
Rows per page
Query Builder