Lucene search
K

10 matches found

WPVulnDB
WPVulnDB
added 2026/01/05 12:0 a.m.6 views

6Storage Rentals <= 2.20.0 - Authenticated (Subscriber+) Server-Side Request Forgery

Description The 6Storage Rentals plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.20.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from...

9.1CVSS5.7AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/30 9:16 a.m.3 views

CVE-2025-64286

Cross-Site Request Forgery CSRF vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through = 3.13.1...

4.3CVSS6.8AI score0.00015EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.3 views

WordPress plugin WP Rentals 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.5AI score0.00015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 7:23 p.m.3 views

CVE-2025-53330

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issue affects WP Rentals: from n/a through = 3.16.1...

6.5CVSS5.9AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 7:15 p.m.2 views

CVE-2025-53330

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issue affects WP Rentals: from n/a through = 3.16.1...

6.5CVSS0.00051EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.1 views

WordPress plugin WP Rentals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS6AI score0.00051EPSS
Exploits0References2
NVD
NVD
added 2022/09/06 11:15 p.m.10 views

CVE-2022-36427

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

9.8CVSS0.00666EPSS
Exploits0References2
OSV
OSV
added 2022/09/06 11:15 p.m.1 views

CVE-2022-36427

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

9.8CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2022/09/06 10:19 p.m.17 views

CVE-2022-36427 WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

7.3CVSS9.6AI score0.00666EPSS
Exploits0References2
Patchstack
Patchstack
added 2022/08/25 12:0 a.m.22 views

WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability

Missing Access Control vulnerability leading to Unauthenticated Stored XSS and plugin settings change discovered by ptsfence in WordPress About Rentals plugin versions = 1.5. Solution Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This...

9.8CVSS2.5AI score0.00666EPSS
Exploits0Affected Software1
Rows per page
Query Builder