CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

25 matches found

Rapid7 Vulnerability Database (full)•added 2019/09/11 12:00 a.m.•12 views

CVE-2019-16250: Improper Authentication

includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...

7.5CVSS7.3AI score0.01364EPSS

SaveExploits1References2

OSV•added 2019/09/09 1:15 p.m.•15 views

CVE-2019-15895

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes...

7.5CVSS7.1AI score0.01695EPSS

SaveExploits0References3

CVE•added 2019/09/09 12:54 p.m.•56 views

CVE-2019-15895

The vulnerability CVE-2019-15895 affects the WordPress Search Exclude plugin prior to version 1.2.4, due to an access control error that allows unauthenticated changes to plugin options. This enables an attacker to perform arbitrary settings changes without authentication, exposing the plugin’s c...

7.5CVSS7.6AI score0.01695EPSS

SaveExploits0References3Affected Software1

Mend•added 2019/09/09 12:54 p.m.•9 views

CVE-2019-15895

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes...

8.7CVSS0.01695EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2019/09/09 12:00 a.m.•8 views

CVE-2019-15895: Missing Authentication for Critical Function

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes...

7.5CVSS7.3AI score0.01695EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by