Lucene search
+L

5049 matches found

Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•2 views

PT-2025-9418

Name of the Vulnerable Software and Affected Versions LJ Custom Menu Links versions n/a through 2.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions n/a...

7.1CVSS0.00393EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/28 1:25 p.m.•18 views

CVE-2025-26925

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS8.5AI score0.00171EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•21 views

PT-2025-8988

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description General information about the issue is not explicitly mentioned, but it is related to a security advisory from Lenovo. The estimated number of potentially affected devices worldwide is not...

6.7CVSS6.7AI score0.0015EPSS
SaveExploits0References17
NVD
NVD
•added 2025/02/26 2:15 p.m.•15 views

CVE-2025-26925

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/26 1:21 p.m.•5 views

CVE-2025-26925 WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS8.5AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/26 1:21 p.m.•29 views

CVE-2025-26925 WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/26 1:21 p.m.•77 views

CVE-2025-26925

CVE-2025-26925 is a CSRF vulnerability in the WordPress plugin Admin Menu Manager, affecting versions up to and including 1.0.3. The provided documents confirm the issue as a CSRF in Admin Menu Manager, but do not supply concrete exploitation details, affected product/version matrix beyond the 1....

4.3CVSS8.5AI score0.00171EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/26 1:17 p.m.•20 views

WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Admin Menu Manager versions = 1.0.3...

4.3CVSS7AI score0.00171EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•20 views

PT-2025-8693 · Unknown · Admin Menu Manager

Name of the Vulnerable Software and Affected Versions: Admin Menu Manager versions 1.0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

4.3CVSS9.4AI score0.00171EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•15 views

WordPress plugin Admin Menu Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.3AI score0.00171EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•4 views

CVE-2025-26925: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS5.8AI score0.00171EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•5 views

CVE-2025-26881: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Sticky Content sticky-menu-block allows Stored XSS.This issue affects Sticky Content: from n/a through = 1.0.1...

6.5CVSS5.8AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/24 4:00 a.m.•48 views

CVE-2025-1617 Netis WF2780 Wireless 2.4G Menu cross site scripting

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...

4.8CVSS0.00309EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•4 views

CVE-2025-1617: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...

4.8CVSS4.2AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/22 12:36 a.m.•25 views

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

5.4CVSS5.8AI score0.0035EPSS
SaveExploits2References4
Patchstack
Patchstack
•added 2025/02/21 12:00 a.m.•12 views

WordPress All In Menu Plugin <= 1.1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin All In Menu versions = 1.1.5...

8.5CVSS8.1AI score0.00338EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/02/20 3:15 p.m.•30 views

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

5.4CVSS0.0035EPSS
SaveExploits2References3
OSV
OSV
•added 2025/02/20 10:15 a.m.•16 views

CVE-2024-13792

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

9.8CVSS7.6AI score0.00548EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•5 views

CVE-2024-13792: Improper Control of Generation of Code

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

9.8CVSS6.3AI score0.00548EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/20 12:00 a.m.•13 views

CVE-2025-25960

Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator...

6.3AI score0.00282EPSS
SaveExploits1References1
Rows per page
Query Builder