Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/10/12 10:5 a.m.10 views

CVE-2025-10175

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6.5AI score0.00351EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/11 12:30 p.m.3 views

EUVD-2025-33843

The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...

6.5CVSS6AI score0.00351EPSS
Exploits0References4
CVE
CVE
added 2025/10/11 9:28 a.m.17 views

CVE-2025-10175

The CVE-2025-10175 entry covers the WP Links Page plugin for WordPress, vulnerable to SQL Injection via the id parameter in all versions up to and including 4.9.6. The issue arises from insufficient escaping of the user-supplied id and inadequate preparation of the existing SQL query, allowing au...

6.5CVSS6.1AI score0.00351EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-26849

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0037EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.1 views

WordPress plugin WP Links Page SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP Links...

8.5CVSS7.5AI score0.00243EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:44 a.m.6 views

CVE-2023-22720

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Robert Macchi WP Links Page plugin = 4.9.3 versions...

6.5CVSS5.6AI score0.0037EPSS
Exploits0References1
CVE
CVE
added 2024/07/13 11:19 a.m.64 views

CVE-2024-6465

CVE-2024-6465 : The WP Links Page plugin for WordPress allows unauthorized modification of data due to a missing capability check in wplf_ajax_update_screenshots. This affects all versions up to and including 4.9.5. Authenticated attackers with Subscriber-level access and above can regenerate the...

4.3CVSS4.7AI score0.00385EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/18 12:0 a.m.2 views

WordPress Plugin WP Links Page Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.6AI score0.00288EPSS
Exploits0References2
CVE
CVE
added 2023/05/11 2:31 p.m.45 views

CVE-2023-22720

CVE-2023-22720 affects the WordPress plugin WP Links Page by Robert Macchi. Versions ≤ 4.9.3 are vulnerable to a Stored XSS due to inadequate input handling. The vulnerability impact is described in the CVE as cross-site scripting, with a PatchSTACK entry noting the fix in version 4.9.4 . No expl...

6.5CVSS5.5AI score0.0037EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/11 12:0 a.m.3 views

WordPress plugin WP Links Page 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.5AI score0.0037EPSS
Exploits0References2
Rows per page
Query Builder