Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-25061

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.00025EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/08/18 4:31 a.m.3 views

CVE-2025-7683

The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1. This is due to missing or incorrect nonce validation on the 'LatestCheckins' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS6.7AI score0.00025EPSS
Exploits0References1
NVD
NVD
added 2025/08/16 4:16 a.m.3 views

CVE-2025-7683

The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1. This is due to missing or incorrect nonce validation on the 'LatestCheckins' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS0.00025EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/08/16 3:38 a.m.2 views

CVE-2025-7683 LatestCheckins <= 1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1. This is due to missing or incorrect nonce validation on the 'LatestCheckins' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS6.7AI score0.00025EPSS
Exploits0References3
CVE
CVE
added 2025/08/16 3:38 a.m.16 views

CVE-2025-7683

CVE-2025-7683 (LatestCheckins WordPress plugin) is a CSRF to Stored XSS vulnerability in versions up to 1 due to missing nonce validation on the LatestCheckins page. This enables unauthenticated attackers to alter settings and inject malicious scripts by tricking an admin into submitting a forged...

6.1CVSS6.5AI score0.00025EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/16 12:0 a.m.1 views

WordPress plugin LatestCheckins 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.1CVSS6.5AI score0.00025EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/08/16 12:0 a.m.3 views

PT-2025-33532 · WordPress · Latestcheckins

Name of the Vulnerable Software and Affected Versions: LatestCheckins plugin for WordPress version 1 Description: The LatestCheckins plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'LatestCheckins' page. This allows...

6.1CVSS6.3AI score0.00025EPSS
Exploits0References7
Patchstack
Patchstack
added 2025/08/15 11:30 p.m.4 views

WordPress LatestCheckins plugin <= 1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin LatestCheckins versions = 1...

6.1CVSS5.7AI score0.00025EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder