Lucene search
K

32 matches found

Patchstack
Patchstack
added 2026/05/01 9:31 a.m.2 views

WordPress Menu Image, Icons made easy plugin <= 3.12 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Menu Image, Icons made easy versions = 3.12...

6.1CVSS5.8AI score0.00135EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/04/29 12:0 a.m.4 views

SourceCodester Pizzafy Ecommerce System 访问控制错误漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System contains a security vulnerability related to access control. This vulnerability arises from improper handling of the img parameter in...

5.8CVSS5.7AI score0.0005EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-55559

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00116EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-46236

Malicious code in bioql PyPI...

6.5CVSS8.5AI score0.00148EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:25 a.m.2 views

CVE-2024-52485

Missing Authorization vulnerability in Yudiz Solutions Ltd. WP Menu Image wp-menu-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Menu Image: from n/a through = 2.2...

6.5CVSS7.2AI score0.00148EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:44 a.m.2 views

CVE-2023-50826

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a through 3.10...

5.9CVSS6.5AI score0.00116EPSS
Exploits0References1
NVD
NVD
added 2025/01/07 4:15 a.m.6 views

CVE-2024-12022

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-52485. Reason: This candidate is a reservation duplicate of CVE-2024-52485. Notes: All CVE users should reference CVE-2024-52485 instead of this candidate. All references and descriptions in this candidate have been...

Exploits0
Cvelist
Cvelist
added 2025/01/07 3:21 a.m.8 views

CVE-2024-12022

...

Exploits0
CVE
CVE
added 2025/01/07 3:21 a.m.61 views

CVE-2024-12022

CVE-2024-12022 entry is rejected and should not be used.

5.2AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/01/07 3:21 a.m.4 views

CVE-2024-12022

...

5.3AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.2 views

PT-2025-1729 · WordPress · Wp Menu Image

Name of the Vulnerable Software and Affected Versions: WP Menu Image plugin for WordPress versions up to, and including, 2.2 Description: The issue is related to a missing capability check on the wmi delete img menu function, which allows unauthenticated attackers to delete images from menus. Thi...

5.3CVSS7.3AI score
Exploits0References6
NVD
NVD
added 2024/12/18 12:15 p.m.9 views

CVE-2024-52485

Missing Authorization vulnerability in Yudiz Solutions Ltd. WP Menu Image wp-menu-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Menu Image: from n/a through = 2.2...

6.5CVSS0.00148EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.2 views

PT-2024-35326 · WordPress · Wp Menu Image

Name of the Vulnerable Software and Affected Versions: WP Menu Image versions through 2.2 Description: The issue is related to a Missing Authorization vulnerability in WP Menu Image, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions throu...

6.5CVSS9.5AI score0.00148EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.2 views

WordPress plugin WP Menu Image 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

6.5CVSS8.2AI score0.00148EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/12/16 3:15 p.m.3 views

WordPress WP Menu Image plugin <= 2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Marek Mikita Patchstack Alliance in WordPress Plugin WP Menu Image versions = 2.2...

6.5CVSS7AI score0.00148EPSS
Exploits0Affected Software1
OSV
OSV
added 2023/12/21 3:15 p.m.1 views

CVE-2023-50826

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a through 3.10...

4.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/12/21 3:15 p.m.18 views

CVE-2023-50826

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a through 3.10...

5.9CVSS0.00116EPSS
Exploits0References1
CVE
CVE
added 2023/12/21 2:46 p.m.39 views

CVE-2023-50826

CVE-2023-50826 : Stored XSS in the WordPress plugin Menu Image, Icons made easy (affected through 3.10). The vulnerability is described as an input handling issue during web page generation (XSS) and is currently listed as Unpatched per the connected documents; patch/update availability is not pr...

5.9CVSS6.5AI score0.00116EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/21 2:46 p.m.14 views

CVE-2023-50826 WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a through 3.10...

5.9CVSS5.9AI score0.00116EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/12/21 12:0 a.m.1 views

WordPress plugin Menu Image, Icons made easy Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Menu Image, Icons made eas...

5.9CVSS6.1AI score0.00116EPSS
Exploits0References2
Rows per page
Query Builder