Lucene search
+L

5042 matches found

EUVD
EUVD
•added 2026/03/13 9:31 p.m.•16 views

EUVD-2026-12011

Cross-Site Request Forgery CSRF vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through = 1.14.1...

4.3CVSS5.8AI score0.00142EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/13 7:55 p.m.•19 views

CVE-2026-4063

The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the addmenuitem method hooked to adminmenu in all versions up to, and including, 4.5.8. This is due to the method performing wpinsertpost and...

4.3CVSS0.00336EPSS
SaveExploits0References5
NVD
NVD
•added 2026/03/13 7:55 p.m.•12 views

CVE-2026-32456

Cross-Site Request Forgery CSRF vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through = 1.14.1...

4.3CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/13 11:42 a.m.•40 views

CVE-2026-32456 WordPress Admin Menu Editor plugin <= 1.14.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through = 1.14.1...

4.3CVSS0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/13 11:42 a.m.•8 views

CVE-2026-32456 WordPress Admin Menu Editor plugin <= 1.14.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through = 1.14.1...

4.3CVSS5.8AI score0.00142EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 11:42 a.m.•7 views

CVE-2026-32456

Cross-Site Request Forgery CSRF vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through = 1.14.1...

5.8AI score0.00142EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/13 11:42 a.m.•39 views

CVE-2026-32456

The CVE concerns the WordPress plugin Admin Menu Editor (admin-menu-editor) with versions up to and including 1.14.1, reporting a Cross-Site Request Forgery (CSRF) vulnerability. The connected records only state the issue as a CSRF vulnerability affecting Admin Menu Editor and do not provide tech...

4.3CVSS5.8AI score0.00142EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 9:25 a.m.•7 views

CVE-2026-4063

The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the addmenuitem method hooked to adminmenu in all versions up to, and including, 4.5.8. This is due to the method performing wpinsertpost and...

4.3CVSS5.7AI score0.00336EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/03/13 9:25 a.m.•11 views

CVE-2026-4063 Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation

The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the addmenuitem method hooked to adminmenu in all versions up to, and including, 4.5.8. This is due to the method performing wpinsertpost and...

4.3CVSS5.7AI score0.00336EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•40 views

PT-2026-25166

The Social Icons Widget & Block by WPZOOM plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the add menu item method hooked to admin menu in all versions up to, and including, 4.5.8. This is due to the method performing wp insert post and...

4.3CVSS5.7AI score0.00336EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•5 views

CVE-2026-32456: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through = 1.14.1...

4.3CVSS5.8AI score0.00142EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•22 views

WordPress plugin Admin Menu Editor 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. Versions of...

4.3CVSS5.7AI score0.00142EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•22 views

PT-2026-25300

Cross-Site Request Forgery CSRF vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through = 1.14.1...

4.3CVSS5.8AI score0.00142EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/03/11 9:31 p.m.•22 views

EUVD-2019-19763

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

6.9CVSS6.3AI score0.00124EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/11 7:16 p.m.•25 views

CVE-2019-25485

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

6.9CVSS0.00124EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/11 6:23 p.m.•28 views

CVE-2019-25485

A buffer overflow in the GUI Preferences language menu field of R 3.4.4 on Windows x64 allows local attackers to bypass DEP and ASLR, triggering a structured exception handler chain to execute arbitrary shellcode with application privileges. The vulnerability is local, requires a crafted payload ...

6.9CVSS6.6AI score0.00124EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/11 6:23 p.m.•14 views

CVE-2019-25485

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

6.9CVSS6.3AI score0.00124EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/11 6:23 p.m.•8 views

CVE-2019-25485 R 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

6.9CVSS6.6AI score0.00124EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/11 12:00 a.m.•27 views

PT-2026-24779

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

6.9CVSS6.3AI score0.00124EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/11 12:00 a.m.•24 views

R 安全漏洞

R is a statistical computing software developed by The R Foundation. Version 3.4.4 of R contains a security vulnerability. This vulnerability stems from a buffer overflow in the GUI preference language menu field, which could allow local attackers to bypass DEP and ASLR protections and execute...

6.9CVSS6.3AI score0.00124EPSS
SaveExploits0References2
Rows per page
Query Builder