Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-34205

Malicious code in bioql PyPI...

6.1CVSS8.7AI score0.00556EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:51 a.m.2 views

CVE-2024-11813

The Pulsating Chat Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.1. This is due to missing or incorrect nonce validation on the aminchatbuttonsettingspage function. This makes it possible for unauthenticated attackers to update...

6.1CVSS7.2AI score0.00556EPSS
Exploits0References1
NVD
NVD
added 2024/12/04 3:15 a.m.11 views

CVE-2024-11813

The Pulsating Chat Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.1. This is due to missing or incorrect nonce validation on the aminchatbuttonsettingspage function. This makes it possible for unauthenticated attackers to update...

6.1CVSS0.00556EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/12/04 2:40 a.m.12 views

CVE-2024-11813 Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Pulsating Chat Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.1. This is due to missing or incorrect nonce validation on the aminchatbuttonsettingspage function. This makes it possible for unauthenticated attackers to update...

6.1CVSS0.00556EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/12/04 2:40 a.m.8 views

CVE-2024-11813 Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Pulsating Chat Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.1. This is due to missing or incorrect nonce validation on the aminchatbuttonsettingspage function. This makes it possible for unauthenticated attackers to update...

6.1CVSS7.2AI score0.00556EPSS
Exploits0References4
CVE
CVE
added 2024/12/04 2:40 a.m.44 views

CVE-2024-11813

CVE-2024-11813 affects the WordPress plugin Pulsating Chat Button (versions ≤ 1.3.6). The flaw is a Cross-Site Request Forgery that exploits missing nonce validation in amin_chat_button_settings_page(), allowing an unauthenticated attacker to trigger actions that update plugin settings and inject...

6.1CVSS7.2AI score0.00556EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.1 views

WordPress plugin Pulsating Chat Button 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.1CVSS8.3AI score0.00556EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/12/03 2:43 p.m.2 views

WordPress Pulsating Chat Button plugin <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Pulsating Chat Button versions = 1.4.1...

6.1CVSS5.9AI score0.00556EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder