Lucene search
+L

50 matches found

Kitploit
Kitploit
•added 2026/09/26 2:56 p.m.•12 views

WP-Links-Page-CVE-Report

WP-Links-Page-CVE-Report Divulgation pour CVE-2025-10175 CVE-2025-10175 - Vulnérabilité dans WP Links Page Ce dépôt divulgue une vulnérabilité découverte dans WP Links Page getresults"SELECT FROM $table WHERE id = $id ..." Vecteur d’attaque : Injection SQL aveugle basée sur le temps via AJAX...

6.5CVSS6.2AI score0.00385EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/10/12 10:05 a.m.•26 views

CVE-2025-10175

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6.5AI score0.00385EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/11 12:30 p.m.•12 views

EUVD-2025-33843

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6AI score0.00385EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/10/11 9:28 a.m.•8 views

CVE-2025-10175 WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6.1AI score0.00385EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/11 9:28 a.m.•26 views

CVE-2025-10175 WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS0.00385EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/11 9:28 a.m.•33 views

CVE-2025-10175

The CVE-2025-10175 entry covers the WP Links Page plugin for WordPress, vulnerable to SQL Injection via the id parameter in all versions up to and including 4.9.6. The issue arises from insufficient escaping of the user-supplied id and inadequate preparation of the existing SQL query, allowing au...

6.5CVSS6.1AI score0.00385EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•13 views

WordPress plugin WP Links Page SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin WP...

6.5CVSS7.7AI score0.00385EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/11 12:00 a.m.•0 views

CVE-2025-10175: Improper Neutralization of Special Elements used in an SQL Command

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS5.7AI score0.00385EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2025-24741

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00267EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•6 views

EUVD-2023-51750

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-26849

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/16 11:25 a.m.•10 views

CVE-2025-30998

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS5.9AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/14 11:15 a.m.•8 views

CVE-2025-30998

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/14 10:34 a.m.•19 views

CVE-2025-30998 WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/14 10:34 a.m.•21 views

CVE-2025-30998

CVE-2025-30998 affects WordPress WP Links Page (versions up to 4.9.6). Root cause: improper neutralization of special elements in SQL commands, enabling SQL injection. Impact per available data: potential high confidentiality impact and low availability impact (CVSS 3.1 base 8.5). Public document...

8.5CVSS5.9AI score0.00267EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/14 10:34 a.m.•5 views

CVE-2025-30998 WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•6 views

WordPress plugin WP Links Page SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP Links...

8.5CVSS7.5AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/14 12:00 a.m.•9 views

PT-2025-33163 · WordPress · Wp Links Page

Name of the Vulnerable Software and Affected Versions: WP Links Page versions through 4.9.6 Description: The software contains an improper neutralization of special elements used in an SQL command, which allows for SQL injection. Recommendations: Update WP Links Page to a version later than 4.9.6...

8.5CVSS7.8AI score0.00267EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•1 views

CVE-2025-30998: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rico Macchi WP Links Page wp-links-page allows SQL Injection.This issue affects WP Links Page: from n/a through = 4.9.6...

8.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:44 a.m.•16 views

CVE-2023-22720

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Robert Macchi WP Links Page plugin = 4.9.3 versions...

6.5CVSS5.6AI score0.0037EPSS
SaveExploits0References1
Rows per page
Query Builder