Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:1 a.m.4 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS5.8AI score0.0042EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-29426

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.0042EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-50840

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00261EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:52 a.m.10 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS7.1AI score0.00261EPSS
Exploits0
WPVulnDB
WPVulnDB
added 2023/11/23 12:0 a.m.21 views

WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery

Description The WCP OpenWeather plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown...

8.8CVSS6.8AI score0.00261EPSS
Exploits0References1
OSV
OSV
added 2023/11/13 1:15 a.m.1 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS7.3AI score0.00261EPSS
Exploits0References1
NVD
NVD
added 2023/11/13 1:15 a.m.13 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS0.00261EPSS
Exploits0References1
Prion
Prion
added 2023/11/13 1:15 a.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

6.8CVSS7.2AI score0.00261EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/13 12:15 a.m.89 views

CVE-2023-46638

CVE-2023-46638 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WCP OpenWeather (Webcodin) for versions up to 2.5.0 . The CVE entry is supported by multiple connected sources, including NVD and Red Hat advisories, all describing CSRF in this plugin family. The Wordfenc...

8.8CVSS6.4AI score0.00261EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/13 12:15 a.m.22 views

CVE-2023-46638 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

4.3CVSS7.1AI score0.00261EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/13 12:15 a.m.24 views

CVE-2023-46638 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

4.3CVSS9AI score0.00261EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/13 12:0 a.m.2 views

WordPress Plugin wcp-openweather Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.5AI score0.00261EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/10/25 12:0 a.m.13 views

WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WCP OpenWeather Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46638 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 63c5a56a4d0f Credits Mika Required privile...

8.8CVSS6.6AI score0.00261EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/08/30 4:15 p.m.2 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

6.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/08/30 4:15 p.m.23 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS6.2AI score0.0042EPSS
Exploits1References1
Prion
Prion
added 2023/08/30 4:15 p.m.21 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

5.8CVSS6AI score0.0042EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/08/30 3:37 p.m.41 views

CVE-2023-25471

CVE-2023-25471 affects WordPress WCP OpenWeather Plugin (versions

7.1CVSS6AI score0.0042EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/30 3:37 p.m.9 views

CVE-2023-25471 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS5.9AI score0.0042EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/08/30 3:37 p.m.23 views

CVE-2023-25471 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS6.3AI score0.0042EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/08/30 12:0 a.m.2 views

WordPress plugin wcp-openweather 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.9AI score0.0042EPSS
Exploits1References2
Rows per page
Query Builder