Lucene search
+L

3 matches found

CVE
CVE
added 2026/06/24 5:33 a.m.48 views

CVE-2026-8905

The CVE concerns the Osiris Signature Banner WordPress plugin (versions up to and including 0.5). The root cause is missing or incorrect nonce validation on a function, enabling Cross-Site Request Forgery (CSRF). This could allow unauthenticated attackers to update plugin settings and inject mali...

6.1CVSS5.8AI score0.00177EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/24 5:33 a.m.47 views

CVE-2026-8905 Osiris Signature Banner <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'prepend_text' Parameter

The Osiris Signature Banner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...

6.1CVSS0.00177EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-11841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP...

5.9CVSS6.9AI score0.02002EPSS
SaveExploits2References2
Rows per page
Query Builder