Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:6 a.m.3 views

CVE-2024-34375

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Sheets To WP Table Live Sync allows Stored XSS.This issue affects Sheets To WP Table Live Sync: from n/a through 3.7.0...

5.9CVSS5.2AI score0.00137EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-34747

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00137EPSS
Exploits0References1
NVD
NVD
added 2024/08/14 10:15 a.m.10 views

CVE-2024-6532

The Sheet to Table Live Sync for Google Sheet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STWTSheetTable shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00391EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/08/14 9:29 a.m.13 views

CVE-2024-6532 Sheet to Table Live Sync for Google Sheet <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcode

The Sheet to Table Live Sync for Google Sheet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STWTSheetTable shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00391EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/08/14 12:0 a.m.1 views

WordPress plugin Sheet to Table Live Sync for Google Sheet 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

6.4CVSS6.4AI score0.00391EPSS
Exploits0References5
NVD
NVD
added 2024/05/06 7:15 p.m.8 views

CVE-2024-34375

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Sheets To WP Table Live Sync allows Stored XSS.This issue affects Sheets To WP Table Live Sync: from n/a through 3.7.0...

5.9CVSS6.1AI score0.00137EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/06 6:28 p.m.16 views

CVE-2024-34375 WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Sheets To WP Table Live Sync allows Stored XSS.This issue affects Sheets To WP Table Live Sync: from n/a through 3.7.0...

5.9CVSS6.3AI score0.00137EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/06 12:0 a.m.1 views

WordPress plugin Sheets To WP Table Live Sync 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

5.9CVSS5.9AI score0.00137EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/05/03 1:37 p.m.3 views

WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin FlexTable versions = 3.7.0...

5.9CVSS6.1AI score0.00137EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/05/03 12:0 a.m.6 views

WordPress Sheets To WP Table Live Sync Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Sheets To WP Table Live Sync Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34375 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 592f4fe7fc70 Credits Manab Jyoti Dowarah...

5.9CVSS6.6AI score0.00137EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/11 11:16 a.m.2 views

WordPress Sheets to WP Table Live Sync plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin FlexTable versions = 3.5.0...

7AI score
Exploits0Affected Software1
NVD
NVD
added 2023/11/22 2:15 p.m.7 views

CVE-2023-26535

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

8.8CVSS0.00106EPSS
Exploits0References1
OSV
OSV
added 2023/11/22 2:15 p.m.2 views

CVE-2023-26535

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

8.8CVSS7.3AI score0.00106EPSS
Exploits0References1
Prion
Prion
added 2023/11/22 2:15 p.m.7 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

6.8CVSS7.3AI score0.00106EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/22 2:5 p.m.33 views

CVE-2023-26535

CVE-2023-26535: Cross-Site Request Forgery in WordPress Sheets To WP Table Live Sync plugin (

8.8CVSS7.1AI score0.00106EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.1 views

WordPress Plugin Sheets To WP Table Live Sync Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS7.9AI score0.00106EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/03/21 12:0 a.m.7 views

WordPress Sheets To WP Table Live Sync Plugin <= 2.12.14 is vulnerable to Cross Site Request Forgery (CSRF)

Software Sheets To WP Table Live Sync Type Plugin Vulnerable versions = 2.12.14 Fixed in 2.12.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 10f41cbc718b Credits...

5.5AI score
Exploits0References2Affected Software1
OSV
OSV
added 2022/06/08 10:15 a.m.0 views

CVE-2022-1712

The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder