Lucene search
K

6208 matches found

NVD
NVD
added 2025/01/16 9:15 p.m.5 views

CVE-2025-23764

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

5.3CVSS0.00439EPSS
Exploits0References1
NVD
NVD
added 2025/01/16 8:15 p.m.5 views

CVE-2025-23476

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

7.1CVSS0.00197EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/16 8:8 p.m.17 views

CVE-2025-23764 WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

5.3CVSS0.00439EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/16 8:5 p.m.16 views

CVE-2025-23476 WordPress my-related-posts plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

7.1CVSS0.00197EPSS
Exploits0References1
CVE
CVE
added 2025/01/16 8:5 p.m.46 views

CVE-2025-23476

CVE-2025-23476 is a CSRF to Stored XSS vulnerability in the WordPress plugin my-related-posts (up to version 1.1). The CVSS 3.1 base score is 7.1 (High) with network attack vector, low attack complexity, and user interaction required. Affected software is the my-related-posts plugin for WordPress...

7.1CVSS7.2AI score0.00197EPSS
Exploits0References1
Circl
Circl
added 2025/01/16 6:56 p.m.6 views

CVE-2024-57684

creationtimestamp| type| source ---|---|--- 2025-01-16 18:56:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2004 2025-01-16 19:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuykgbpga2b 2025-01-16 19:24:57+00:00| seen|...

9.8CVSS7.3AI score0.13674EPSS
Exploits0References16
Patchstack
Patchstack
added 2025/01/16 6:43 p.m.4 views

WordPress Mark Posts plugin <= 2.2.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Mark Posts versions = 2.2.4...

5.4CVSS7AI score0.00305EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.4 views

WordPress Delete All Posts plugin <= 1.1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Delete All Posts versions = 1.1.1...

6.5CVSS7AI score0.00308EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.2 views

WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Copy Move Posts versions = 1.6...

5.3CVSS7AI score0.00439EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.2 views

WordPress Random Posts, Mp3 Player + ShareButton plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Random Posts, Mp3 Player + ShareButton versions = 1.4.1...

7.1CVSS6.1AI score0.00211EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.3 views

WordPress my-related-posts plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin my-related-posts versions = 1.1...

7.1CVSS6.2AI score0.00197EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.2 views

WordPress Attach Gallery Posts plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Attach Gallery Posts versions = 1.6...

7.1CVSS6.1AI score0.00276EPSS
Exploits0Affected Software1
Circl
Circl
added 2025/01/16 6:1 p.m.8 views

CVE-2024-37181

creationtimestamp| type| source ---|---|--- 2025-01-16 18:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113839339708358437 2025-01-16 18:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv65cevp2j 2025-01-16 18:44:12+00:00| seen|...

2.6CVSS5.8AI score0.00132EPSS
Exploits0References4
Circl
Circl
added 2025/01/16 3:8 a.m.17 views

CVE-2025-22907

creationtimestamp| type| source ---|---|--- 2025-01-16 03:08:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113835827961264343 2025-01-16 03:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lftcuo6mte2t 2025-01-16 03:48:45+00:00| seen|...

9.8CVSS5.8AI score0.00894EPSS
Exploits1References6
Circl
Circl
added 2025/01/16 12:59 a.m.4 views

CVE-2024-9042

creationtimestamp| type| source ---|---|--- 2025-01-16 00:59:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lft3bma4gs2t 2025-01-16 03:04:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lftcbec3qa24 2025-01-16 11:25:08+00:00| seen|...

5.9CVSS6.6AI score0.01394EPSS
Exploits0References24
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.3 views

WordPress plugin Mark Posts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.3AI score0.00305EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.2 views

WordPress plugin Copy Move Posts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

5.3CVSS8.2AI score0.00439EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.2 views

WordPress plugin my-related-posts 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.2AI score0.00197EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.2 views

PT-2025-4898 · Isnowfy · My-Related-Posts

Name of the Vulnerable Software and Affected Versions: isnowfy my-related-posts versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

7.1CVSS9AI score0.00197EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.2 views

PT-2025-5073 · Unknown · Copy Move Posts

Name of the Vulnerable Software and Affected Versions: Copy Move Posts versions n/a through 1.6 Description: The issue is related to a lack of authorization in Copy Move Posts, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a...

5.3CVSS9.3AI score0.00439EPSS
Exploits0References3
Rows per page
Query Builder