Lucene search
+L

107 matches found

CNNVD
CNNVD
added 2023/04/06 12:0 a.m.7 views

WordPress plugin User Registration 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS5.2AI score0.00392EPSS
SaveExploits0References2
NVD
NVD
added 2023/01/30 9:15 p.m.25 views

CVE-2022-4831

The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which...

5.4CVSS5.4AI score0.00548EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.6 views

WordPress plugin User Registration 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

7.5CVSS7.4AI score0.00743EPSS
SaveExploits2References2
Wordfence Blog
Wordfence Blog
added 2021/12/08 3:5 p.m.43 views

Authentication Bypass Vulnerability Patched in User Registration Plugin

Note: To receive disclosures like this in your inbox the moment they’re published, you can subscribe to our WordPress Security Mailing List. On September 16, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for a vulnerability we discovered in...

6.8CVSS9.5AI score0.07EPSS
SaveExploits1
OSV
OSV
added 2021/11/08 6:15 p.m.8 views

CVE-2021-24647

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or userna...

8.1CVSS5.6AI score0.0968EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.9 views

WordPress User Registration插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.The WordPress plugin User Registration has a cross-site scripting vulnerability that stems from the lack of proper validation ...

5.4CVSS5.3AI score0.006EPSS
SaveExploits3References2
Packet Storm
Packet Storm
added 2010/09/16 12:0 a.m.21 views

Mollify 1.6 Cross Site Scripting

------------------------------------------------------------------------ Software................Mollify 1.6 Vulnerability...........Reflected Cross-site Scripting Download................http://freshmeat.net/projects/mollify Release Date............9/15/2010 Tested On...............Windows Vista...

SaveExploits0
Rows per page
Query Builder