Lucene search
K

38 matches found

Patchstack
Patchstack
added 2025/11/20 2:39 a.m.5 views

WordPress OnePress theme <= 2.3.15 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Theme OnePress versions = 2.3.15...

6.4CVSS5.8AI score0.00209EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-36933

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00177EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-2898

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.00245EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-24897

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00513EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-37587

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00211EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:42 a.m.6 views

CVE-2024-37448

Cross-Site Request Forgery CSRF vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This issue affects OnePress: from n/a through = 2.3.6...

4.3CVSS5.9AI score0.00177EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:5 p.m.11 views

CVE-2022-1608

The OnePress Social Locker WordPress plugin through 5.6.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.7AI score0.00513EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/02/07 6:1 p.m.3 views

CVE-2025-22643

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through = 2.3.11...

4.3CVSS7.2AI score0.00245EPSS
Exploits0References1
NVD
NVD
added 2025/02/04 3:15 p.m.18 views

CVE-2025-22643

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through = 2.3.11...

4.3CVSS0.00245EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/04 2:21 p.m.9 views

CVE-2025-22643 WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through = 2.3.11...

4.3CVSS8.5AI score0.00245EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/04 2:21 p.m.18 views

CVE-2025-22643 WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through = 2.3.11...

4.3CVSS0.00245EPSS
Exploits0References1
CVE
CVE
added 2025/02/04 2:21 p.m.50 views

CVE-2025-22643

CVE-2025-22643 affects FameThemes OnePress WordPress theme (versions

4.3CVSS7.2AI score0.00245EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.1 views

WordPress plugin OnePress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS8.6AI score0.00245EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.3 views

PT-2025-4610 · Famethemes · Famethemes Onepress

Name of the Vulnerable Software and Affected Versions: FameThemes OnePress versions prior to 2.3.11 Description: The issue is related to a lack of authorization in FameThemes OnePress, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For...

4.3CVSS9.5AI score0.00245EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/02/03 8:5 p.m.4 views

WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Theme OnePress versions = 2.3.11...

4.3CVSS7AI score0.00245EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/01/02 12:15 p.m.12 views

CVE-2024-37448

Cross-Site Request Forgery CSRF vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This issue affects OnePress: from n/a through = 2.3.6...

4.3CVSS0.00177EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:0 p.m.10 views

CVE-2024-37448 WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This issue affects OnePress: from n/a through = 2.3.6...

4.3CVSS5.9AI score0.00177EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/02 12:0 p.m.17 views

CVE-2024-37448 WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This issue affects OnePress: from n/a through = 2.3.6...

4.3CVSS0.00177EPSS
Exploits0References1
CVE
CVE
added 2025/01/02 12:0 p.m.48 views

CVE-2024-37448

CVE-2024-37448 describes a Cross-Site Request Forgery in FameThemes OnePress WordPress theme (affecting version up to 2.3.6). Exploitation would enable unauthorized actions performed by CSRF on behalf of a logged-in user, per Red Hat and Wordfence entries referencing OnePress

4.3CVSS5.9AI score0.00177EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.3 views

WordPress plugin OnePress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

4.3CVSS6.5AI score0.00177EPSS
Exploits0References1
Rows per page
Query Builder