Lucene search
+L

1172 matches found

Cvelist
Cvelist
added 2022/06/27 8:58 a.m.27 views

CVE-2022-1904 Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled, leading to a Reflected Cross-Site Scripting...

6.1AI score0.01421EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/06/27 12:0 a.m.7 views

WordPress plugin Pricing Tables 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. cross-site scripting vulnerability...

6.1CVSS5.7AI score0.01421EPSS
SaveExploits2References2
OSV
OSV
added 2022/06/20 8:24 p.m.7 views

MAL-2022-1171 Malicious code in audit-pricing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63494ded7d57fd765870370ad094bbbf96de1b2ea04e60358ef700792419245a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:24 p.m.3 views

Malicious code in audit-pricing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63494ded7d57fd765870370ad094bbbf96de1b2ea04e60358ef700792419245a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
wpexploit
wpexploit
added 2022/06/16 12:0 a.m.143 views

Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQLi

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

9.8CVSS2.9AI score0.07942EPSS
SaveExploits2
CNVD
CNVD
added 2022/06/09 12:0 a.m.47 views

WordPress Fatcat Apps Easy Pricing Tables plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Fatcat Apps Easy Pricing Tables plugin 3.1.2 and earlier versions contain a cross-site...

4.8CVSS2.2AI score0.00539EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/02 2:15 p.m.7 views

CVE-2021-36866

Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...

4.8CVSS5.8AI score0.00539EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/02 2:15 p.m.20 views

Cross site scripting

Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...

3.5CVSS4.9AI score0.00539EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.10 views

WordPress plugin Fatcat Apps Easy Pricing Tables 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Fatcat Apps Easy Pricing Tables plugin 3.1.2 and earlier versions contain a cross-site...

4.8CVSS5.2AI score0.00539EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/05/31 7:24 p.m.32 views

CVE-2021-36866 WordPress Easy Pricing Tables plugin <= 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...

4.8CVSS5.1AI score0.00539EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/05/31 7:24 p.m.12 views

CVE-2021-36866 WordPress Easy Pricing Tables plugin <= 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...

4.8CVSS4.8AI score0.00539EPSS
SaveExploits0References2
CVE
CVE
added 2022/05/31 7:24 p.m.104 views

CVE-2021-36866

Summary: CVE-2021-36866 affects the Fatcat Apps Easy Pricing Tables WordPress plugin up to version 3.1.2. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of inputs in the plugin, enabling an authenticated user (author or hi...

4.8CVSS4.8AI score0.00539EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2022/05/31 12:0 a.m.12 views

Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting

The plugin does not sanitise and escape parameter before outputting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled, leading to a Reflected Cross-Site Scripting PoC With the "Compatibility Mode"...

6.1CVSS0.2AI score0.01421EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
added 2022/05/27 12:0 a.m.24 views

Easy Pricing Tables < 3.1.3 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as author to perform Stored Cross-Site Scripting attacks...

4.8CVSS3.3AI score0.00539EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/05/27 12:0 a.m.30 views

WordPress Easy Pricing Tables plugin <= 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Easy Pricing Tables plugin versions = 3.1.2. Solution Update the WordPress Easy Pricing Tables plugin to the latest available version at least 3.1.3...

4.8CVSS2.9AI score0.00539EPSS
SaveExploits0References2Affected Software1
Rapid7 Blog
Rapid7 Blog
added 2022/05/23 2:42 p.m.19 views

DFIR Without Limits: Moving Beyond the “Sucker's Choice” of Today’s Breach Response Services

Three-quarters of CEOs and their boards believe a major breach is “inevitable.” And those closest to the action? Like CISOs? They’re nearly unanimous. Gartner is right there, too. Their 2021 Market Guide for Digital Forensics and Incident Response DFIR Services recommends you “operate under the...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2022/05/18 12:0 a.m.72 views

WordPress Pricing Table plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A SQL injection vulnerability exists in versions prior to WordPress Pricing Table s plugin 3.6.1, which stem...

9.8CVSS1.6AI score0.13256EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/16 3:15 p.m.5 views

CVE-2022-0867

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users...

9.8CVSS7.9AI score0.13256EPSS
SaveExploits1References3
NVD
NVD
added 2022/05/16 3:15 p.m.20 views

CVE-2022-0867

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users...

9.8CVSS0.13256EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/16 3:15 p.m.4 views

CVE-2022-0867

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users...

9.8CVSS5.9AI score0.13256EPSS
SaveExploits1References1
Rows per page
Query Builder