Lucene search
+L

451 matches found

WPVulnDB
WPVulnDB
added 2024/04/29 12:0 a.m.11 views

Evergreen Content Poster < 1.4.3 - Missing Authorization

Description The Evergreen Content Poster plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createnetworkpost function in versions up to, and including, 1.4.2. This makes it possible for authenticated attackers, with subscriber-level...

8.8CVSS6.7AI score0.00312EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/22 4:13 p.m.6 views

WordPress Evergreen Content Poster plugin <= 1.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by CatFather Patchstack Alliance in WordPress Plugin Evergreen Content Poster versions = 1.4.2...

8.8CVSS7AI score0.00312EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/04/07 6:15 p.m.18 views

CVE-2024-31345

Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2...

9.1CVSS9.3AI score0.0085EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/07 5:27 p.m.13 views

CVE-2024-31345 WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2...

9.1CVSS8.6AI score0.0085EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/07 5:27 p.m.27 views

CVE-2024-31345 WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2...

9.1CVSS9.4AI score0.0085EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/07 5:27 p.m.72 views

CVE-2024-31345

CVE-2024-31345 affects the WordPress plugin Auto Poster . It is an Authenticated (Administrator+) vulnerability with Unrestricted/Arbitrary File Upload of dangerous types, according to Red Hat and Wordfence entries. The issue affects Auto Poster: from n/a through 1.2, and the vulnerability is cur...

9.1CVSS8.6AI score0.0085EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/07 12:0 a.m.13 views

PT-2024-23988 · Unknown · Sukhchain Singh Auto Poster

Name of the Vulnerable Software and Affected Versions: Sukhchain Singh Auto Poster versions 1.2 and earlier Description: The issue affects the Auto Poster, allowing for the unrestricted upload of files with dangerous types. Recommendations: For versions 1.2 and earlier, update to a version that...

9.1CVSS9.5AI score0.0085EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/07 12:0 a.m.9 views

WordPress Plugin Auto Poster 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

9.1CVSS8.4AI score0.0085EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/05 11:13 a.m.6 views

WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin Auto Poster versions = 1.2...

9.1CVSS7AI score0.0085EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.9 views

WordPress Auto Poster Plugin <= 1.2 is vulnerable to Arbitrary File Upload

Software Auto Poster Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Upload CVE CVE-2024-31345 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 328c54e266f4 Credits younsoung kim, SeoHyeon Lee,...

9.1CVSS6.5AI score0.0085EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/03/19 4:15 p.m.15 views

CVE-2024-29099

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...

7.1CVSS6.9AI score0.00398EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/19 4:15 p.m.3 views

CVE-2024-29099

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...

6.1CVSS7.3AI score0.00398EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/19 3:56 p.m.65 views

CVE-2024-29099

Evergreen Content Poster (WordPress plugin) CVE-2024-29099 is a Reflected XSS in input processed during web page generation. Affected: Evergreen Content Poster

7.1CVSS8.6AI score0.00398EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/19 3:56 p.m.13 views

CVE-2024-29099 WordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...

7.1CVSS6.9AI score0.00398EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/19 3:56 p.m.21 views

CVE-2024-29099 WordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...

7.1CVSS7.1AI score0.00398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.6 views

PT-2024-22719 · Unknown · Evergreen Content Poster

Name of the Vulnerable Software and Affected Versions: Evergreen Content Poster versions 1.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers...

7.1CVSS9.3AI score0.00398EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.5 views

WordPress Plugin Evergreen Content Poster Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS5.8AI score0.00398EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/15 12:0 a.m.11 views

WordPress Evergreen Content Poster Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Evergreen Content Poster Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29099 Patch priority Medium CVSS severity Medium 7.1 Developer Evergreen Content Poster PSID acc9a1ae98cd Credits Joshua Chan...

7.1CVSS6.5AI score0.00398EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/02/12 6:15 a.m.19 views

CVE-2024-24932

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Djo VK Poster Group allows Reflected XSS.This issue affects VK Poster Group: from n/a through 2.0.3...

7.1CVSS6.9AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/12 6:15 a.m.6 views

CVE-2024-24932

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Djo VK Poster Group allows Reflected XSS.This issue affects VK Poster Group: from n/a through 2.0.3...

6.1CVSS7.3AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder