Lucene search
+L

196 matches found

Positive Technologies
Positive Technologies
added 2024/05/03 12:00 a.m.18 views

PT-2024-25561 · Codebard · Patron Button/Widgets For Patreon

Name of the Vulnerable Software and Affected Versions: CodeBard's Patron Button and Widgets for Patreon versions n/a through 2.2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

7.1CVSS6.8AI score0.0033EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/04/29 4:06 p.m.31 views

WordPress CodeBard's Patron Button and Widgets for Patreon plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin CodeBard's Patron Button and Widgets for Patreon versions = 2.2.0...

7.1CVSS6.1AI score0.0033EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/29 12:00 a.m.69 views

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33928 Patch priority Medium CVSS severity Medium 7.1 Developer Codebard PSID f0b671d6d681 Credits Le Ngoc...

7.1CVSS6.6AI score0.0033EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/12/24 12:00 a.m.8 views

VulnCheck KEV: CVE-2021-24227

The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials...

7.5CVSS7.1AI score0.05927EPSS
SaveExploits1References1
WPVulnDB
WPVulnDB
added 2023/11/23 12:00 a.m.15 views

Patreon WordPress < 1.8.8 - Cross-Site Request Forgery

Description The Patreon WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.7. This is due to missing or incorrect nonce validation on several functions in the /classes/patreonwordpress.php file. This makes it possible for unauthenticat...

8.8CVSS6.5AI score0.00294EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/11/23 12:00 a.m.21 views

CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Cross-Site Request Forgery

Description The CodeBard's Patron Button and Widgets for Patreon plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.9. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible for unauthenticated...

8.8CVSS6.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/22 6:15 p.m.8 views

CVE-2023-47765

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/22 6:15 p.m.34 views

CVE-2023-47765

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

8.8CVSS0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/22 6:15 p.m.21 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

6.8CVSS7.4AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/22 6:12 p.m.35 views

CVE-2023-47765 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

4.3CVSS9.1AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/22 6:12 p.m.86 views

CVE-2023-47765

CVE-2023-47765: Cross-Site Request Forgery in CodeBard’s Patron Button and Widgets for Patreon plugin (WordPress) &lt;= 2.1.9. Root cause: missing nonce validation enabling CSRF with unauthenticated attackers to forge actions. Affected versions:

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/22 12:00 a.m.6 views

WordPress Plugin CodeBard s Patron Button and Widgets for Patreon Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin CodeBard s...

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/18 11:15 p.m.16 views

CVE-2023-41129

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6...

8.8CVSS0.00294EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/18 11:15 p.m.9 views

CVE-2023-41129

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6...

8.8CVSS7.3AI score0.00294EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/18 11:15 p.m.22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6...

6.8CVSS7.2AI score0.00294EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/18 10:16 p.m.135 views

CVE-2023-41129

CVE-2023-41129 : Patreon WordPress Plugin (Patreon Connect)

8.8CVSS8AI score0.00294EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/18 10:16 p.m.17 views

CVE-2023-41129 WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6...

4.3CVSS7AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/18 10:16 p.m.33 views

CVE-2023-41129 WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6...

4.3CVSS8.9AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/18 12:00 a.m.16 views

PT-2023-27813 · Patreon · Patreon Wordpress

Name of the Vulnerable Software and Affected Versions: Patreon WordPress versions 1.8.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

8.8CVSS8.5AI score0.00294EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/11/18 12:00 a.m.7 views

WordPress Plugin Patreon WordPress Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.5AI score0.00294EPSS
SaveExploits0References2
Rows per page
Query Builder