Lucene search
+L

102 matches found

Positive Technologies
Positive Technologies
•added 2023/06/07 12:00 a.m.•6 views

PT-2023-11371

Name of the Vulnerable Software and Affected Versions WP HTML Mail plugin for WordPress versions up to, and including, 2.2.10 Description The issue arises from insufficient input sanitization, allowing unauthenticated attackers to inject arbitrary HTML in pages. This can happen if an attacker...

6.1CVSS0.0058EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/02/20 12:00 a.m.•14 views

PT-2023-10260 · Unknown · Arnoldle Submitbymailplugin

Name of the Vulnerable Software and Affected Versions: arnoldle submitByMailPlugin version 1.0b2.9 Description: A vulnerability was found in the processing of the file edit list.php, leading to cross-site request forgery. The attack may be initiated remotely. Recommendations: For arnoldle...

8.8CVSS7.1AI score0.00361EPSS
SaveExploits0References5
OSV
OSV
•added 2022/11/18 11:15 p.m.•16 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/18 11:15 p.m.•27 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00306EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/18 10:03 p.m.•35 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.2AI score0.00306EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/18 10:03 p.m.•82 views

CVE-2022-44740

The CVE-2022-44740 entry affects the WordPress Creative Mail plugin versions up to 1.5.4. The connected sources describe multiple Cross-Site Request Forgery (CSRF) vulnerabilities in this plugin, enabling attackers to trigger unwanted actions when a logged-in user interacts with the site. Reporte...

8.8CVSS7.4AI score0.00306EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/11/18 7:15 p.m.•15 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00287EPSS
SaveExploits0References1
OSV
OSV
•added 2022/11/18 7:15 p.m.•24 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00757EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/18 7:15 p.m.•30 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/18 7:15 p.m.•51 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00757EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/18 7:15 p.m.•23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.8AI score0.00287EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/18 6:47 p.m.•11 views

CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.1AI score0.00757EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/18 6:47 p.m.•82 views

CVE-2022-40687

CVE-2022-40687 affects the WordPress Creative Mail plugin (versions

8.8CVSS7AI score0.00757EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/18 6:38 p.m.•13 views

CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.1AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/11/18 6:38 p.m.•39 views

CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.1AI score0.00287EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/18 6:38 p.m.•76 views

CVE-2022-40686

CVE-2022-40686 affects the WordPress Creative Mail plugin up to version 1.5.4, describing a Cross-Site Request Forgery (CSRF) vulnerability in authenticated requests. The vulnerability consistency is confirmed across multiple sources (NVD listing and vulnerability databases in OpenVAS/patchstack/...

8.8CVSS7.1AI score0.00287EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/11/18 12:00 a.m.•20 views

WordPress plugin Creative Mail 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS7.7AI score0.00287EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•18 views

PT-2022-25473 · Unknown · Creative Mail

Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions = 1.5.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to...

8.8CVSS8.5AI score0.00287EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•12 views

PT-2022-25474 · Unknown · Creative Mail

Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions = 1.5.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...

8.8CVSS8.6AI score0.00757EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/10/28 12:00 a.m.•44 views

WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to plugin settings reset discovered by Muhammad Daffa Patchstack Alliance in the WordPress Creative Mail plugin versions = 1.5.4. Solution Update the WordPress Creative Mail plugin to the latest available version at least 1.6.0...

8.8CVSS4.2AI score0.00757EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder