Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:1 a.m.1 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS5.8AI score0.00088EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-50840

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00074EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-29426

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00088EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:52 a.m.8 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS7.1AI score0.00074EPSS
Exploits0
WPVulnDB
WPVulnDB
added 2023/11/23 12:0 a.m.20 views

WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery

Description The WCP OpenWeather plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown...

8.8CVSS6.8AI score0.00074EPSS
Exploits0References1
NVD
NVD
added 2023/11/13 1:15 a.m.12 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS0.00074EPSS
Exploits0References1
OSV
OSV
added 2023/11/13 1:15 a.m.1 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/11/13 1:15 a.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

6.8CVSS7.2AI score0.00074EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/13 12:15 a.m.85 views

CVE-2023-46638

CVE-2023-46638 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WCP OpenWeather (Webcodin) for versions up to 2.5.0 . The CVE entry is supported by multiple connected sources, including NVD and Red Hat advisories, all describing CSRF in this plugin family. The Wordfenc...

8.8CVSS6.4AI score0.00074EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/13 12:15 a.m.21 views

CVE-2023-46638 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

4.3CVSS7.1AI score0.00074EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/13 12:15 a.m.21 views

CVE-2023-46638 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

4.3CVSS9AI score0.00074EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/13 12:0 a.m.1 views

WordPress Plugin wcp-openweather Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.5AI score0.00074EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/10/25 12:0 a.m.12 views

WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WCP OpenWeather Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46638 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 63c5a56a4d0f Credits Mika Required privile...

8.8CVSS6.6AI score0.00074EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/08/30 4:15 p.m.23 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS6.2AI score0.00088EPSS
Exploits1References1
OSV
OSV
added 2023/08/30 4:15 p.m.0 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

6.1CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/08/30 4:15 p.m.18 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

5.8CVSS6AI score0.00088EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/30 3:37 p.m.8 views

CVE-2023-25471 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS5.9AI score0.00088EPSS
Exploits1References1
CVE
CVE
added 2023/08/30 3:37 p.m.31 views

CVE-2023-25471

CVE-2023-25471 affects WordPress WCP OpenWeather Plugin (versions

7.1CVSS6AI score0.00088EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/08/30 3:37 p.m.21 views

CVE-2023-25471 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS6.3AI score0.00088EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/08/30 12:0 a.m.2 views

PT-2023-20089 · Webcodin · Webcodin Wcp Openweather Plugin

Name of the Vulnerable Software and Affected Versions: Webcodin WCP OpenWeather plugin versions = 2.5.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

7.1CVSS6AI score0.00088EPSS
Exploits1References3
Rows per page
Query Builder