Lucene search
+L

22 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 9:34 a.m.•18 views

CVE-2015-9451

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbmailchimp pmfbtid parameter...

9.8CVSS8.2AI score0.0237EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:07 a.m.•20 views

CVE-2015-9450

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbcc pmfbtid parameter...

9.8CVSS8.2AI score0.02183EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/08/16 7:15 p.m.•21 views

CVE-2021-34659

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the /license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32...

6.1CVSS6.4AI score0.00895EPSS
SaveExploits1References2
Prion
Prion
•added 2021/08/16 7:15 p.m.•30 views

Cross site scripting

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the /license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32...

4.3CVSS6.1AI score0.00895EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/08/16 6:22 p.m.•41 views

CVE-2021-34659 Plugmatter Pricing Table Lite <= 1.0.32 Reflected Cross-Site Scripting

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the /license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32...

6.1CVSS6.2AI score0.00895EPSS
SaveExploits1References2
CVE
CVE
•added 2021/08/16 6:22 p.m.•72 views

CVE-2021-34659

The CVE-2021-34659 entry concerns the WordPress Plugmatter Pricing Table Lite plugin. Affected component: license.php parameter email, which is vulnerable to Reflected Cross-Site Scripting (XSS) in versions up to and including 1.0.32. The underlying issue is a reflected XSS flaw that allows injec...

6.1CVSS6AI score0.00895EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•9 views

CVE-2021-34659: Improper Neutralization of Input During Web Page Generation

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the /license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/08/16 12:00 a.m.•5 views

PT-2021-20627

Name of the Vulnerable Software and Affected Versions: Plugmatter Pricing Table Lite WordPress plugin versions up to and including 1.0.32 Description: The issue concerns Reflected Cross-Site Scripting, where attackers can inject arbitrary web scripts via the email parameter in the /license.php...

6.1CVSS0.00895EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/08/16 12:00 a.m.•18 views

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress Plugins is an open source application plugin for WordPress. A security vulnerability exists in the WordPress Plugins...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits1References4
Patchstack
Patchstack
•added 2021/08/13 12:00 a.m.•23 views

WordPress Plugmatter Pricing Table <= 1.0.32 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Plugmatter Pricing Table versions = 1.0.32. Solution This plugin has been closed as of August 12, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS3.1AI score0.00895EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2019/11/21 12:00 a.m.•23 views

WordPress plugmatter-optin-feature-box-lite plugin SQL injection vulnerability (CNVD-2019-41888)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. plugmatter-optin-feature-box-lite is a feature list plugin used in it. The WordPress plugmatter-optin-feature-box-lite plugin...

9.8CVSS8AI score0.0237EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/11/20 12:00 a.m.•20 views

WordPress plugmatter-optin-feature-box-lite plugin SQL injection vulnerability (CNVD-2019-42838)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. plugmatter-optin-feature-box-lite is a feature list plugin used in it. A SQL injection vulnerability exists in the WordPress...

9.8CVSS8.1AI score0.02183EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/07 3:15 p.m.•29 views

Sql injection

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbmailchimp pmfbtid parameter...

7.5CVSS8.4AI score0.0237EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2019/10/07 3:15 p.m.•25 views

Sql injection

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbcc pmfbtid parameter...

7.5CVSS8.4AI score0.02183EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/10/07 2:17 p.m.•41 views

CVE-2015-9451

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbmailchimp pmfbtid parameter...

10AI score0.0237EPSS
SaveExploits1References3
CVE
CVE
•added 2019/10/07 2:14 p.m.•71 views

CVE-2015-9450

Summary: The plugmatter-optin-feature-box-lite WordPress plugin is affected by an SQL injection vulnerability in versions before 2.0.14, exploitable via the request parameter wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid. This is documented across CVE/NVD records and corroborated by other datab...

9.8CVSS9.9AI score0.02183EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/10/07 2:14 p.m.•38 views

CVE-2015-9450

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbcc pmfbtid parameter...

10AI score0.02183EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/10/07 12:00 a.m.•5 views

PT-2019-7409

Name of the Vulnerable Software and Affected Versions plugmatter-optin-feature-box-lite plugin versions prior to 2.0.14 Description The issue concerns SQL injection via the "wp-admin/admin-ajax.php?action=pmfb cc" API endpoint, specifically through the pmfb tid parameter. This allows for potentia...

9.8CVSS0.02183EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/07 12:00 a.m.•6 views

CVE-2015-9450: Improper Neutralization of Special Elements used in an SQL Command

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbcc pmfbtid parameter...

9.8CVSS8.2AI score0.02183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/07 12:00 a.m.•4 views

PT-2019-7410

Name of the Vulnerable Software and Affected Versions plugmatter-optin-feature-box-lite plugin version 2.0.13 and earlier Description The issue concerns a SQL injection vulnerability. It affects the wp-admin/admin-ajax.php endpoint, specifically the action=pmfb mailchimp and the pmfb tid paramete...

9.8CVSS0.0237EPSS
SaveExploits1References6
Rows per page
Query Builder