Lucene search
+L

34 matches found

CVE
CVE
added 2023/10/12 2:26 p.m.97 views

CVE-2023-41131

CVE-2023-41131 refers to a CSRF vulnerability in the WordPress plugin Sptify Play Button for WordPress (Jonk @ Follow me Darling Sp tify Play Button) affecting versions

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/12 12:00 a.m.11 views

WordPress plugin Sp*tify Play Button Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/12 12:00 a.m.10 views

PT-2023-27815 · WordPress · Jonk @ Follow Me Darling Sp*Tify Play Button

Name of the Vulnerable Software and Affected Versions: Jonk @ Follow me Darling Sptify Play Button for WordPress plugin versions = 2.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performi...

8.8CVSS8.5AI score0.00214EPSS
SaveExploits0References4
OSV
OSV
added 2023/04/05 8:15 a.m.11 views

CVE-2023-26536

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.05 versions...

5.4CVSS6.7AI score0.0037EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/05 8:15 a.m.33 views

CVE-2023-26536

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.05 versions...

6.5CVSS6.1AI score0.0037EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/05 8:15 a.m.24 views

Cross site scripting

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.05 versions...

4.9CVSS5.3AI score0.0037EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.10 views

WordPress plugin Sptify Play Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS6.5AI score0.0037EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/04/04 8:15 p.m.3 views

CVE-2023-1840

The Sptify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.8CVSS6AI score0.00352EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/04 12:00 a.m.8 views

PT-2023-17273 · WordPress · Spotify Play Button

Name of the Vulnerable Software and Affected Versions: The Sptify Play Button for WordPress plugin versions up to, and including, 2.07 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows...

4.8CVSS5.7AI score0.00352EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/04/04 12:00 a.m.16 views

WordPress plugin Sptify Play Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS6.1AI score0.00352EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/02/24 12:00 a.m.14 views

WordPress Sp*tify Play Button for WordPress Plugin <= 2.05 is vulnerable to Cross Site Scripting (XSS)

Software Sptify Play Button for WordPress Type Plugin Vulnerable versions = 2.05 Fixed in 2.06 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26536 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8e5491367060 Credits Mika...

6.5CVSS6.1AI score0.0037EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/02/24 12:00 a.m.19 views

Sp*tify Play Button for WordPress < 2.06 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.1AI score0.0037EPSS
SaveExploits0Affected Software1
Hacker One
Hacker One
added 2015/10/24 6:00 p.m.62 views

Udemy: Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification

1 Malicious attacker by visiting course page e.g. https://www.udemy.com/overview-of-big-data-hadoop/ and intercepting browser's generated requests can find one to the following URL:...

6.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/11/12 12:00 a.m.42 views

Visual MP3 Splitter & Joiner 6.1 - '.wav' Buffer Overflow

Title: Visual MP3 Splitter & Joiner 6.1 .wav Buffer Overflow Vulnerability Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; GlaDiatOr,SILVER STAR , HoBeeZ, Coffin Of Evil special thanks : r0073r,Sid3^effects,L0rd...

5.3AI score
SaveExploits0
Rows per page
Query Builder