Lucene search
+L

8003 matches found

Positive Technologies
Positive Technologies
•added 2023/06/03 12:00 a.m.•22 views

PT-2023-19373 · Vcita · Crm/Lead Management By Vcita

Name of the Vulnerable Software and Affected Versions: CRM and Lead Management by vcita plugin for WordPress versions up to, and including, 2.6.2 Description: The issue is related to Stored Cross-Site Scripting via the email parameter due to insufficient input sanitization and output escaping. Th...

6.4CVSS5.7AI score0.00596EPSS
SaveExploits2References7
Positive Technologies
Positive Technologies
•added 2023/06/03 12:00 a.m.•20 views

PT-2023-18822 · Vcita · Contact Form/Calls To Action

Name of the Vulnerable Software and Affected Versions: Contact Form and Calls To Action by vcita plugin for WordPress versions up to, and including, 2.6.4 Description: The issue is related to Stored Cross-Site Scripting via the email parameter due to insufficient input sanitization and output...

6.4CVSS5.8AI score0.00518EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2023/06/02 12:00 a.m.•6 views

PT-2023-22747

Name of the Vulnerable Software and Affected Versions The Page Builder by AZEXO plugin for WordPress versions up to, and including, 1.27.133 Description The issue is due to missing or incorrect nonce validation on the azh add post, azh duplicate post, azh update post, and azh remove post function...

8.8CVSS0.00317EPSS
SaveExploits0References11
WPVulnDB
WPVulnDB
•added 2023/06/02 12:00 a.m.•12 views

Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery (CSRF) to Stored XSS

The plugin does not protect the ajax actions azhsave against CSRF attacks, allowing an unauthenticated attacker to modify posts by tricking a logged in user with rights to edit the post to submit a crafted request. Furthermore if the targeted user has a role of editor or above, arbitrary web...

6.1CVSS6.2AI score0.00208EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/05/25 12:15 p.m.•16 views

CVE-2022-46814

Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2023/05/25 12:15 p.m.•38 views

CVE-2022-46814

Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/25 12:15 p.m.•28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...

6.8CVSS8.7AI score0.00271EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/25 11:09 a.m.•46 views

CVE-2022-46814 WordPress Kodex Posts likes Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...

4.3CVSS9AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/25 11:09 a.m.•69 views

CVE-2022-46814

CVE-2022-46814 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Kodex Posts likes plugin, affected in versions

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/25 11:09 a.m.•11 views

CVE-2022-46814 WordPress Kodex Posts likes Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...

4.3CVSS8.8AI score0.00271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/25 12:00 a.m.•6 views

CVE-2022-46814: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/25 12:00 a.m.•16 views

WordPress plugin Kodex Posts: Cross-Site Request Forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.2AI score0.00271EPSS
SaveExploits0References3
NVD
NVD
•added 2023/05/18 11:15 a.m.•60 views

CVE-2023-27423

Cross-Site Request Forgery CSRF vulnerability in Ramon Fincken Auto Prune Posts plugin = 1.8.0 versions...

8.8CVSS6.5AI score0.00265EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/05/18 11:15 a.m.•17 views

CVE-2023-27423

Cross-Site Request Forgery CSRF vulnerability in Ramon Fincken Auto Prune Posts plugin = 1.8.0 versions...

8.8CVSS7.3AI score0.00265EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/18 11:15 a.m.•25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ramon Fincken Auto Prune Posts plugin = 1.8.0 versions...

6.8CVSS8.7AI score0.00265EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/18 10:29 a.m.•11 views

CVE-2023-27423 WordPress Auto Prune Posts Plugin <= 1.8.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ramon Fincken Auto Prune Posts plugin = 1.8.0 versions...

5.4CVSS7.1AI score0.00265EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/18 10:29 a.m.•68 views

CVE-2023-27423

CVE-2023-27423 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Ramon Fincken Auto Prune Posts, affecting versions

8.8CVSS7.2AI score0.00265EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/18 10:29 a.m.•58 views

CVE-2023-27423 WordPress Auto Prune Posts Plugin <= 1.8.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ramon Fincken Auto Prune Posts plugin = 1.8.0 versions...

5.4CVSS9AI score0.00265EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/18 12:00 a.m.•7 views

CVE-2023-27423: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ramon Fincken Auto Prune Posts plugin = 1.8.0 versions...

8.8CVSS8.3AI score0.00265EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/18 12:00 a.m.•31 views

WordPress plugin Auto Prune Posts: Cross-site Request Forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS8.1AI score0.00265EPSS
SaveExploits0References2
Rows per page
Query Builder