Lucene search
K

5776 matches found

CNVD
CNVD
added 2019/09/05 12:0 a.m.5 views

WordPress Woody ad snippets plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Woody ad snippets is used in one of the pages to add ads to the plugin. A cross-site scripting vulnerability exists in the WordPress...

8.8CVSS6.2AI score0.70211EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/05 12:0 a.m.2 views

WordPress affiliates-manager plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. affiliates-manager is an e-commerce marketing plugin used in it. A cross-site request forgery vulnerability exists in versions of the...

8.8CVSS6.7AI score0.00175EPSS
Exploits0References1
NVD
NVD
added 2019/09/03 12:15 p.m.12 views

CVE-2019-15864

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS...

6.1CVSS6.4AI score0.00368EPSS
Exploits0References2
Prion
Prion
added 2019/09/03 12:15 p.m.11 views

Cross site scripting

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS...

4.3CVSS6.4AI score0.00368EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

WordPress wps-hide-login plugin security bypass vulnerability (CNVD-2019-30732)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin that is used in it. A security vulnerability exists in WordPress wps-hide-login plugi...

9.8CVSS6.7AI score0.01024EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

WordPress wp-private-content-plus plugin unauthorized operation vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-private-content-plus is a plugin for restricting access to website content. A security vulnerability exists in WordPress...

7.5CVSS6.5AI score0.00261EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.2 views

WordPress wps-hide-login plugin security bypass vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A security vulnerability exists in WordPress wps-hide-login plugin versio...

9.8CVSS6.7AI score0.01118EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.4 views

WordPress Related Posts Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Related Posts is a plugin for adding related content. WordPress Related Posts plugin version 1.8.2 before the cross-site scripting...

6.1CVSS6.3AI score0.0019EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.1 views

WordPress easy-pdf-restaurant-menu-upload plugin cross-site scripting vulnerabilities

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. easy-pdf-restaurant-menu-upload is used in which a restaurant menu online upload plugin. Cross-site scripting vulnerabilit...

6.1CVSS6.7AI score0.00368EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.1 views

WordPress webp-express plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-express is a plugin that converts images from other formats to webp format. A cross-site scripting vulnerability exists in...

5.4CVSS6.2AI score0.00352EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.3 views

WordPress wp-ultimate-recipe plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-recipe is a plugin for inserting recipes into web pages. A cross-site scripting vulnerability exists in WordPress...

5.4CVSS6.2AI score0.00259EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.2 views

WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...

8.8CVSS6.7AI score0.00202EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.2 views

WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability (CNVD-2019-30099)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...

8.8CVSS6.7AI score0.00109EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.2 views

WordPress easy-property-listings plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-property-listings is a real estate website builder plugin used in it. A cross-site scripting vulnerability exists in WordPress...

6.1CVSS6.2AI score0.0019EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.5 views

WordPress nd-booking Plugin Unauthorized Operation Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. nd-booking is an online reservation management plugin used in it. A security vulnerability exists in WordPress nd-booking plugin befor...

6.1CVSS6.6AI score0.00409EPSS
Exploits1References1
NVD
NVD
added 2019/08/30 5:15 p.m.7 views

CVE-2019-15836

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...

5.4CVSS5.6AI score0.00259EPSS
Exploits0References2
Prion
Prion
added 2019/08/30 5:15 p.m.12 views

Cross site scripting

The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789...

4.3CVSS6.3AI score0.00886EPSS
Exploits2References2Affected Software1
Prion
Prion
added 2019/08/30 5:15 p.m.20 views

Cross site request forgery (csrf)

The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajaxwooinfobannerpostclick, ajaxwooinfobannerpostxout, or ajaxfbtogglevisibility...

6.8CVSS8.8AI score0.00132EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2019/08/30 5:15 p.m.14 views

Cross site scripting

The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS...

4.3CVSS6.4AI score0.00368EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/30 4:8 p.m.10 views

CVE-2019-15836

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...

5.6AI score0.00259EPSS
Exploits0References2
Rows per page
Query Builder