Lucene search
+L

729 matches found

CNNVD
CNNVD
•added 2022/08/23 12:00 a.m.•18 views

WordPress Plugin Download Manager Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS5.3AI score0.00577EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/08/23 12:00 a.m.•10 views

PT-2022-22275

Name of the Vulnerable Software and Affected Versions W3 Eden Download Manager plugin version 3.2.48 and earlier Description The issue concerns multiple authenticated persistent Cross-Site Scripting XSS vulnerabilities. These vulnerabilities allow attackers to inject malicious scripts into...

5.4CVSS0.00577EPSS
SaveExploits0References5
CVE
CVE
•added 2022/08/22 2:50 p.m.•92 views

CVE-2022-34857

CVE-2022-34857 is a reflected Cross-Site Scripting vulnerability in the WordPress plugin SP Project & Document Manager (smartypants) version

6.1CVSS6AI score0.00632EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/08/22 12:00 a.m.•20 views

WordPress Plugin Download Manager Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.5CVSS7AI score0.01185EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/08/04 12:00 a.m.•23 views

WordPress Plugin Download Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS8AI score0.03831EPSS
SaveExploits2References5
CNVD
CNVD
•added 2022/07/19 12:00 a.m.•71 views

WordPress Download Manager plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6AI score0.01387EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/07/17 11:15 a.m.•15 views

CVE-2022-2168

The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting...

6.1CVSS5.9AI score0.01387EPSS
SaveExploits2References2
CNVD
CNVD
•added 2022/07/13 12:00 a.m.•52 views

WordPress Event Manager plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in versions of the WordPress Event Manager plugin prior to...

6.1CVSS6.2AI score0.00849EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/06/30 6:15 p.m.•9 views

CVE-2022-34810

A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

6.5CVSS5.9AI score0.00727EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/06/24 7:15 a.m.•17 views

CVE-2017-20093

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

4.3CVSS5.1AI score0.00464EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/24 7:15 a.m.•27 views

CVE-2017-20095

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...

9.8CVSS0.00938EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/24 7:15 a.m.•35 views

CVE-2017-20093

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

4.3CVSS0.00464EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/24 7:15 a.m.•35 views

Cross site request forgery (csrf)

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

4.3CVSS4.7AI score0.00464EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/06/24 6:45 a.m.•58 views

CVE-2017-20095

CVE-2017-20095 affects the WordPress plugin Simple Ads Manager . The connected sources describe a remote, network-exploitable vulnerability that leads to code injection due to manipulation of unknown code. Public documentation labels it as critical/high impact (e.g., NVD CVSS v3.1 base score 9.8,...

9.8CVSS8.2AI score0.00938EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/24 6:45 a.m.•34 views

CVE-2017-20095 Simple Ads Manager Plugin code injection

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...

6.3CVSS9.8AI score0.00938EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/06/24 6:45 a.m.•16 views

CVE-2017-20093 Download Manager Plugin cross-site request forgery

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

4.3CVSS7AI score0.00464EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/06/24 6:45 a.m.•42 views

CVE-2017-20093 Download Manager Plugin cross-site request forgery

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

4.3CVSS4.7AI score0.00464EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/24 6:45 a.m.•78 views

CVE-2017-20093

CVE-2017-20093 affects WordPress Plugin Download Manager (version 2.8.99). Multiple sources describe a cross-site request forgery vulnerability in an unspecified/unknown function, with remote exploitation possible. No concrete patch/version remediation is stated in the provided documents; further...

4.3CVSS4.6AI score0.00464EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•11 views

CVE-2017-20097: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely...

6.1CVSS4.6AI score0.00646EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•6 views

PT-2022-7968

Name of the Vulnerable Software and Affected Versions Simple Ads Manager Plugin affected versions not specified Description A critical vulnerability was found in the Simple Ads Manager Plugin, allowing for code injection through remote attacks. The manipulation leads to code injection, and the...

9.8CVSS0.00938EPSS
SaveExploits1References5
Rows per page
Query Builder