Lucene search
+L

847 matches found

Vulnrichment
Vulnrichment
added 2025/01/16 8:7 p.m.4 views

CVE-2025-23818 WordPress More Link Modifier plugin <= 1.0.3 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in pyko More Link Modifier more-link-modifier allows Stored XSS.This issue affects More Link Modifier: from n/a through = 1.0.3...

7.1CVSS7.2AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:7 p.m.17 views

CVE-2025-23818 WordPress More Link Modifier plugin <= 1.0.3 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in pyko More Link Modifier more-link-modifier allows Stored XSS.This issue affects More Link Modifier: from n/a through = 1.0.3...

7.1CVSS0.002EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.4 views

WordPress More Link Modifier plugin <= 1.0.3 - CSRF to Cross-Site Scripting vulnerability

CSRF to Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin More Link Modifier versions = 1.0.3...

7.1CVSS6.3AI score0.002EPSS
SaveExploits0Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.10 views

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.16 views

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.11 views

AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/02 2:15 p.m.12 views

CVE-2024-53780

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

7.1CVSS0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 1:48 p.m.23 views

CVE-2024-53780 WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

7.1CVSS0.00152EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 1:48 p.m.13 views

CVE-2024-53780 WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

7.1CVSS8.6AI score0.00152EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 1:48 p.m.56 views

CVE-2024-53780

CVE-2024-53780 describes a Cross-Site Request Forgery that enables Stored XSS in the WordPress Load More Posts plugin, affecting versions up to 1.4.0 (per the CVE entry). The available connected sources corroborate the CSRF-to-Stored-XSS issue and indicate a later fix in version 1.5.0 or newer (P...

7.1CVSS7.2AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:0 a.m.8 views

PT-2024-35893 · Unknown · Load More Posts

Name of the Vulnerable Software and Affected Versions: Load More Posts versions 1.4.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS6.8AI score0.00152EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/11/28 3:7 p.m.7 views

WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Load More Posts versions = 1.5.0...

7.1CVSS6.2AI score0.00152EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2024/11/10 12:0 a.m.67 views

CVE-2024-46613

WeeChat is affected by CVE-2024-46613 for versions prior to 4.4.2. The vulnerability is an integer overflow that leads to a buffer overflow in core/core-string.c when there are more than two billion items in a list. Affected functions include string_free_split_shared, string_free_split, string_fr...

9.8CVSS7.5AI score0.00464EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/10/29 12:15 p.m.31 views

CVE-2024-49662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

7.1CVSS0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/29 12:15 p.m.10 views

CVE-2024-49662

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webgensis Simple Load More allows Reflected XSS.This issue affects Simple Load More: from n/a through 1.0...

6.1CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 11:42 a.m.13 views

CVE-2024-49662 WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

7.1CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/29 11:42 a.m.38 views

CVE-2024-49662 WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

7.1CVSS0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/29 12:0 a.m.9 views

PT-2024-33614 · Unknown · Webgensis Simple Load More

Name of the Vulnerable Software and Affected Versions: Webgensis Simple Load More versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

7.1CVSS5.6AI score0.00281EPSS
SaveExploits0References6
OSV
OSV
added 2024/10/26 9:15 a.m.7 views

CVE-2024-9967

The WP show more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's showmore shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS6AI score0.00334EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/10/26 8:35 a.m.31 views

CVE-2024-9967 WP show more <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_more Shortcode

The WP show more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's showmore shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00334EPSS
SaveExploits0References6
Rows per page
Query Builder