Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-17532

Malicious code in bioql PyPI...

9.9CVSS6.4AI score0.0029EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/11 4:3 p.m.0 views

CVE-2025-48140

Improper Control of Generation of Code 'Code Injection' vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/a through = 1.1.4...

9.9CVSS5.9AI score0.0029EPSS
Exploits0References1
NVD
NVD
added 2025/06/09 4:15 p.m.6 views

CVE-2025-48140

Improper Control of Generation of Code 'Code Injection' vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/a through = 1.1.4...

9.9CVSS0.0029EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/09 3:53 p.m.2 views

CVE-2025-48140 WordPress MetalpriceAPI plugin <= 1.1.4 - Remote Code Execution (RCE) Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/a through = 1.1.4...

9.9CVSS5.2AI score0.0029EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/09 3:53 p.m.10 views

CVE-2025-48140 WordPress MetalpriceAPI plugin <= 1.1.4 - Remote Code Execution (RCE) Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/a through = 1.1.4...

9.9CVSS0.0029EPSS
Exploits0References1
CVE
CVE
added 2025/06/09 3:53 p.m.45 views

CVE-2025-48140

CVE-2025-48140 is a confirmed RCE in the WordPress plugin MetalpriceAPI (versions ≤ 1.1.4) due to an improper control of code generation. The vulnerability allows code execution on affected sites; patch status indicates a fix has been applied in later versions. Affected product is the MetalpriceA...

9.9CVSS5.9AI score0.0029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.1 views

WordPress plugin MetalpriceAPI 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

9.9CVSS7.1AI score0.0029EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/09 12:0 a.m.1 views

PT-2025-24518 · Unknown · Metalpriceapi

Name of the Vulnerable Software and Affected Versions: MetalpriceAPI versions 1.1.4 and earlier Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection', in MetalpriceAPI. This allows for Code Injection, which can be exploited. Recommendations...

9.9CVSS6AI score0.0029EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/05/22 11:30 a.m.4 views

WordPress MetalpriceAPI plugin <= 1.1.4 - Remote Code Execution (RCE) Vulnerability

Remote Code Execution RCE Vulnerability discovered by ch4r0n in WordPress Plugin MetalpriceAPI versions = 1.1.4...

9.9CVSS7.1AI score0.0029EPSS
Exploits0Affected Software1
Rows per page
Query Builder