Lucene search
+L

6 matches found

Kitploit
Kitploit
added 2026/08/26 9:28 p.m.2 views

CVE-2025-8018

Exploit CVE-2025-8018 – Food Ordering Review System v1.0 Questo repository fornisce un proof-of-concept PoC in Python per l'exploit di CVE‑2025‑8018 , una vulnerabilità di SQL Injection ad alta gravità scoperta nel Food Ordering Review System v1.0. La vulnerabilità viene attivata tramite il...

8.8CVSS6.7AI score0.00358EPSS
SaveExploits2
OSV
OSV
added 2025/03/07 9:15 a.m.10 views

CVE-2025-0959

The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the regid parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

6.5CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/07 8:21 a.m.8 views

CVE-2025-0959 Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id

The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the regid parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

8.8CVSS7.5AI score0.00428EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/07 8:21 a.m.41 views

CVE-2025-0959 Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id

The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the regid parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

8.8CVSS0.00428EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/07 8:21 a.m.69 views

CVE-2025-0959

CVE-2025-0959 — Eventer WordPress Plugin vulnerable to SQL Injection via reg_id in versions up to 3.9.9.2. Exploitation requires Subscriber+ authenticated access and can lead to extraction of sensitive data due to insufficient escaping/preparation in the SQL query. Wordfence/CVEs show the issue a...

8.8CVSS7.5AI score0.00428EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2025/03/06 11:21 p.m.11 views

WordPress Eventer plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id vulnerability

Authenticated Subscriber+ SQL Injection via regid vulnerability discovered by Lucio Sá in WordPress Plugin Eventer versions = 3.9.9.2...

8.8CVSS8.1AI score0.00428EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder