Lucene search
K

7 matches found

Patchstack
Patchstack
added 2025/10/03 10:57 p.m.4 views

WordPress Notification Bar plugin <= 2.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Notification Bar versions = 2.2...

4.3CVSS6.8AI score0.00013EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/10/03 12:15 p.m.2 views

CVE-2025-9895

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...

4.3CVSS0.00013EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/03 12:0 a.m.6 views

WordPress plugin Notification Bar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.4AI score0.00013EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/07/06 4:37 p.m.3 views

WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin WordPress Notification Bar versions = 1.3.10...

5.9CVSS6.1AI score0.00106EPSS
Exploits0Affected Software1
OSV
OSV
added 2022/08/23 4:15 p.m.0 views

CVE-2022-29476

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in 8 Degree Themes otification Bar for WordPress plugin = 1.1.8 at WordPress...

6.1CVSS5.8AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/12 12:12 a.m.3 views

CVE-2022-29476

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in 8 Degree Themes otification Bar for WordPress plugin = 1.1.8 at WordPress...

6.1CVSS6.1AI score0.00769EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2021/09/08 12:0 a.m.14 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-70736)

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin, which stems from version 2.1.0.08087 and prior...

5.4CVSS0.3AI score0.00162EPSS
Exploits2References1
Rows per page
Query Builder