Lucene search
+L

8008 matches found

NVD
NVD
•added 2023/10/25 6:17 p.m.•49 views

CVE-2023-46152

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

8.8CVSS5.8AI score0.00338EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/25 6:17 p.m.•31 views

CVE-2023-46152

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

8.8CVSS7.3AI score0.00338EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/25 6:17 p.m.•28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

6.8CVSS8.8AI score0.00338EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•29 views

WordPress Plugin WOLF Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WOLF - WordPress Posts Bul...

8.8CVSS6.5AI score0.00338EPSS
SaveExploits0References2
CVE
CVE
•added 2023/10/24 10:13 a.m.•107 views

CVE-2023-46152

CVE-2023-46152 concerns the WOLF plugin (WordPress Posts Bulk Editor and Manager Professional) for WordPress. The vulnerability is a Cross-Site Request Forgery (CSRF) in realmag777 WOLF versions

8.8CVSS6.5AI score0.00338EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/24 10:13 a.m.•12 views

CVE-2023-46152 WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

4.3CVSS8.5AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/10/24 12:00 a.m.•15 views

PT-2023-29891 · Novo Media · Novo-Map

Name of the Vulnerable Software and Affected Versions: Novo-media Novo-Map : your WP posts on custom google maps plugin versions 1.1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user in...

8.8CVSS8.8AI score0.00338EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/24 12:00 a.m.•11 views

CVE-2023-46190: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin = 1.1.2 versions...

8.8CVSS7.8AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/24 12:00 a.m.•24 views

PT-2023-29880 · WordPress · Realmag777 Wolf – Wordpress Posts Bulk Editor/Manager Professional

Name of the Vulnerable Software and Affected Versions: realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin versions 1.0.7.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to...

8.8CVSS8.8AI score0.00338EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/24 12:00 a.m.•11 views

CVE-2023-46152: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

8.8CVSS7.8AI score0.00338EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/10/20 8:15 a.m.•23 views

CVE-2023-4386

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the getposts function. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. ...

8.1CVSS6AI score0.00879EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
•added 2023/10/20 12:00 a.m.•28 views

WordPress Popular Posts < 6.3.3 - Contributor+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.7AI score0.00397EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2023/10/19 12:00 a.m.•55 views

WordPress Popular Posts Plugin < 6.3.3 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpresspopularpostsproject:wordpresspopularposts"; if...

6.5CVSS7AI score0.00397EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/18 1:13 p.m.•142 views

CVE-2023-45607

The CVE-2023-45607 entry concerns the WordPress Popular Posts plugin for WordPress, stating an authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in versions up to 6.3.2. Connected sources confirm the affected component is the WordPress Popular Posts plugin and identify ...

6.5CVSS5.5AI score0.00397EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/18 1:13 p.m.•69 views

CVE-2023-45607 WordPress WordPress Popular Posts Plugin <= 6.3.2 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Hector Cabrera WordPress Popular Posts plugin = 6.3.2 versions...

6.5CVSS6AI score0.00397EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/10/18 12:00 a.m.•23 views

WordPress 4.6.x < 4.6.27 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A potential disclosure of user email addresses. - An RCE POP Chains vulnerability. - A Cross-Site Scripting XSS vulnerability in the post link navigation block. - An issue...

6.6AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/18 12:00 a.m.•8 views

CVE-2023-45607: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Hector Cabrera WordPress Popular Posts plugin = 6.3.2 versions...

6.5CVSS6AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/18 12:00 a.m.•24 views

WordPress Plugin WordPress Popular Posts Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6AI score0.00397EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/10/18 12:00 a.m.•26 views

WordPress 5.0.x < 5.0.20 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A potential disclosure of user email addresses. - An RCE POP Chains vulnerability. - A Cross-Site Scripting XSS vulnerability in the post link navigation block. - An issue...

6.6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/10/18 12:00 a.m.•20 views

WordPress 4.5.x < 4.5.30 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A potential disclosure of user email addresses. - An RCE POP Chains vulnerability. - A Cross-Site Scripting XSS vulnerability in the post link navigation block. - An issue...

6.6AI score
SaveExploits0References2
Rows per page
Query Builder