Lucene search
K

42 matches found

RedhatCVE
RedhatCVE
added 2025/10/12 10:5 a.m.12 views

CVE-2025-10175

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6.5AI score0.00351EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/11 12:30 p.m.3 views

EUVD-2025-33843

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6AI score0.00351EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/11 9:28 a.m.2 views

CVE-2025-10175 WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6.1AI score0.00351EPSS
Exploits0References4
CVE
CVE
added 2025/10/11 9:28 a.m.17 views

CVE-2025-10175

The CVE-2025-10175 entry covers the WP Links Page plugin for WordPress, vulnerable to SQL Injection via the id parameter in all versions up to and including 4.9.6. The issue arises from insufficient escaping of the user-supplied id and inadequate preparation of the existing SQL query, allowing au...

6.5CVSS6.1AI score0.00351EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/11 9:28 a.m.8 views

CVE-2025-10175 WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS0.00351EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.2 views

WordPress plugin WP Links Page SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin WP...

6.5CVSS7.7AI score0.00351EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-24741

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00243EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-51750

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00288EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-26849

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0037EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.4 views

CVE-2025-30998

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS5.9AI score0.00243EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 11:15 a.m.2 views

CVE-2025-30998

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS0.00243EPSS
Exploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.14 views

CVE-2025-30998

CVE-2025-30998 affects WordPress WP Links Page (versions up to 4.9.6). Root cause: improper neutralization of special elements in SQL commands, enabling SQL injection. Impact per available data: potential high confidentiality impact and low availability impact (CVSS 3.1 base 8.5). Public document...

8.5CVSS5.9AI score0.00243EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.10 views

CVE-2025-30998 WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS0.00243EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.3 views

CVE-2025-30998 WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS5.8AI score0.00243EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.3 views

PT-2025-33163 · WordPress · Wp Links Page

Name of the Vulnerable Software and Affected Versions: WP Links Page versions through 4.9.6 Description: The software contains an improper neutralization of special elements used in an SQL command, which allows for SQL injection. Recommendations: Update WP Links Page to a version later than 4.9.6...

8.5CVSS7.8AI score0.00243EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.1 views

WordPress plugin WP Links Page SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP Links...

8.5CVSS7.5AI score0.00243EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:44 a.m.6 views

CVE-2023-22720

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Robert Macchi WP Links Page plugin = 4.9.3 versions...

6.5CVSS5.6AI score0.0037EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:58 a.m.3 views

CVE-2023-47651

Cross-Site Request Forgery CSRF vulnerability in Robert Macchi WP Links Page.This issue affects WP Links Page: from n/a through 4.9.4...

8.8CVSS8AI score0.00288EPSS
Exploits0References1
OSV
OSV
added 2025/04/07 10:15 p.m.3 views

CVE-2025-3386

A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /adminlinks of the component Friendship Link Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The...

4.8CVSS3.7AI score0.003EPSS
Exploits1References3
Patchstack
Patchstack
added 2024/07/15 2:23 a.m.7 views

WordPress WP Links Page plugin <= 4.9.5 - Missing Authorization to Authenticated (Subscriber+) Limited Image Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Image Update vulnerability discovered by Lucio Sá in WordPress Plugin WP Links Page versions = 4.9.5...

4.3CVSS6.8AI score0.00385EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder