Lucene search
K

726 matches found

CNNVD
CNNVD
added 2024/09/12 12:0 a.m.2 views

WordPress plugin Music Request Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS6.7AI score0.00307EPSS
Exploits1References2
Patchstack
Patchstack
added 2024/09/05 3:0 a.m.4 views

WordPress Amelia plugin <= 1.2.4 - Missing Authorization to Sensitive Information Exposure vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability discovered by Nadim Zubidat in WordPress Plugin Amelia versions = 1.2.4...

6.5CVSS6.9AI score0.00355EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/04 3:56 a.m.3 views

WordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Marco Wotschka in WordPress Plugin The Ultimate WordPress Toolkit – WP Extended versions = 3.0.8...

6.5CVSS6.9AI score0.00461EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/03 12:47 a.m.3 views

Wordpress Ninja Forms plugin 3.8.6 - 3.8.10 - Reflected XSS

Wordpress Ninja Forms plugin 3.8.6 - 3.8.10 - Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin Ninja Forms versions 3.8.6-3.8.10...

6.1CVSS6.4AI score0.00662EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2024/09/02 3:48 a.m.3 views

WordPress Share This Image plugin <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via alignment Parameter vulnerability discovered by Francesco Carlucci in WordPress Plugin Share This Image versions = 2.01...

6.4CVSS5.8AI score0.0036EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/08/29 1:9 a.m.2 views

WordPress Visual Sound (old) plugin <= 1.06 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound old versions = 1.06...

6.5CVSS7AI score0.00213EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2024/08/29 1:8 a.m.2 views

WordPress infolinks Ad Wrap plugin <= 1.0.2 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Daniel Ruf in WordPress Plugin infolinks Ad Wrap versions = 1.0.2...

6.5CVSS7AI score0.00206EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.2 views

WordPress plugin Registrations for the Events Calendar SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress plug...

8.8CVSS7.7AI score0.00441EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/08/26 3:5 p.m.4 views

WordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by hnwmn Patchstack Alliance in WordPress Plugin WP Testimonial Widget versions = 3.1...

7.6CVSS8.1AI score0.00439EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/16 1:52 p.m.3 views

WordPress Icegram Engage plugin <= 3.1.25 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Icegram versions = 3.1.25...

6.5CVSS6.1AI score0.00245EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/16 1:34 a.m.3 views

WordPress Download Plugins and Themes from Dashboard plugin <= 1.8.7 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Krzysztof Zając in WordPress Plugin Download Plugins and Themes from Dashboard versions = 1.8.7...

4.2CVSS7AI score0.00161EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/08/15 3:12 a.m.2 views

WordPress DL Robots.txt plugin <= 1.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin DL Robots.txt versions = 1.2...

4.8CVSS6.1AI score0.00255EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2024/08/15 3:7 a.m.3 views

WordPress ElementsKit Pro plugin <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin ElementsKit Pro versions = 3.6.5...

6.4CVSS5.7AI score0.0025EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/08/07 10:33 a.m.5 views

WordPress Themify Shortcodes plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Themify Shortcodes versions = 2.1.1...

6.5CVSS6.1AI score0.00246EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/07 9:48 a.m.5 views

WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Hummingbird versions = 3.9.1...

8.8CVSS7AI score0.00198EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/01 3:12 p.m.3 views

WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by RE-ALTER Patchstack Alliance in WordPress Plugin Filter & Grids versions = 2.8.33...

7.3CVSS7AI score0.00399EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.3 views

WordPress plugin Remote Content Shortcode 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin Remote Content...

6.4CVSS6.6AI score0.0026EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/07/22 3:17 a.m.5 views

WordPress WP Mail SMTP plugin <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure vulnerability

Authenticated Admin+ SMTP Password Exposure vulnerability discovered by Guus Verbeek in WordPress Plugin WP Mail SMTP by WPForms versions = 4.0.1...

2.7CVSS7AI score0.00574EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/07/19 12:23 p.m.2 views

WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability

Arbitrary Options Update vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin CTX Feed versions = 6.5.6...

7.2CVSS7AI score0.00557EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/07/12 7:22 a.m.3 views

WordPress Quotes and Tips plugin < 1.45 - Admin+ Arbitrary File Upload vulnerability

Admin+ Arbitrary File Upload vulnerability discovered by Peng Zhou zpbrent in WordPress Plugin Quotes And Tips versions 1.45...

4.9CVSS7AI score0.00414EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder