CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

57954 matches found

Patchstack•added 2025/10/03 10:32 p.m.•12 views

WordPress ContentMX Content Publisher plugin <= 1.0.6 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin ContentMX Content Publisher versions = 1.0.6...

4.3CVSS7AI score0.00172EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 10:18 p.m.•13 views

WordPress Mobile Site Redirect plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Mobile Site Redirect versions = 1.2.1...

6.1CVSS5.8AI score0.0016EPSS

SaveExploits0References1Affected Software1

OSV•added 2025/10/03 8:39 p.m.•11 views

CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...

6.9CVSS6AI score

SaveExploits0References4

Cvelist•added 2025/10/03 8:39 p.m.•29 views

CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

6.9CVSS0.00301EPSS

SaveExploits1References2

CVE•added 2025/10/03 8:39 p.m.•33 views

CVE-2025-10695

Two unauthenticated diagnostic endpoints in OpenSupports 4.11.0 allow arbitrary backend-initiated connections to an attacker-controlled destination, enabling unauthenticated SSRF for internal network scanning and service interaction. Affected product/version: OpenSupports 4.11.0. Root cause: endp...

6.9CVSS6.8AI score0.00301EPSS

SaveExploits1References2Affected Software1