Lucene search
+L

6 matches found

NVD
NVD
•added 2026/05/14 9:16 a.m.•45 views

CVE-2026-6514

The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popupsubmit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to...

7.5CVSS0.00459EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/14 8:24 a.m.•18 views

CVE-2026-6514

The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popupsubmit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to...

7.5CVSS5.9AI score0.00459EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/14 8:24 a.m.•25 views

EUVD-2026-30263

The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popupsubmit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to...

7.5CVSS5.9AI score0.00459EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/14 8:24 a.m.•79 views

CVE-2026-6514 InfusedWoo Pro <= 5.1.2 - Unauthenticated Arbitrary File Read via 'url' Parameter

The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popupsubmit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to...

7.5CVSS0.00459EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/14 12:00 a.m.•20 views

WordPress plugin InfusedWoo Pro 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.5CVSS6AI score0.00459EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•0 views

CVE-2026-6514: Server-Side Request Forgery (SSRF)

The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popupsubmit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to...

7.5CVSS5.8AI score0.00459EPSS
SaveExploits0References2
Rows per page
Query Builder