Lucene search
+L

1301 matches found

Cvelist
Cvelist
added 2025/04/03 1:27 p.m.35 views

CVE-2025-31736 WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in richtexteditor Rich Text Editor richtexteditor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rich Text Editor: from n/a through = 1.0.1...

6.5CVSS0.00361EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.9 views

WordPress plugin Rich Text Editor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS7.1AI score0.00361EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/03 12:0 a.m.14 views

PT-2025-14730 · Unknown · Rich Text Editor

Name of the Vulnerable Software and Affected Versions: Rich Text Editor versions 1.0.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Rich Text Editor, which allows exploitation of incorrectly configured access control security levels. Recommendation...

6.5CVSS6.9AI score0.00361EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/02 1:26 p.m.7 views

CVE-2025-31623

Cross-Site Request Forgery CSRF vulnerability in richtexteditor Rich Text Editor richtexteditor allows Stored XSS.This issue affects Rich Text Editor: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00131EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/04/01 2:18 p.m.15 views

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing

A new sophisticated phishing-as-a-service PhaaS platform called Lucid has targeted 169 entities in 88 countries using smishing messages propagated via Apple iMessage and Rich Communication Services RCS for Android. Lucid's unique selling point lies in its weaponizing of legitimate communication...

6.4AI score
SaveExploits0
Patchstack
Patchstack
added 2025/03/31 2:10 p.m.5 views

WordPress Rich Text Editor plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Rich Text Editor versions = 1.0.1...

7.1CVSS6.2AI score0.00131EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/31 1:15 p.m.22 views

CVE-2025-31623

Cross-Site Request Forgery CSRF vulnerability in richtexteditor Rich Text Editor richtexteditor allows Stored XSS.This issue affects Rich Text Editor: from n/a through = 1.0.1...

7.1CVSS0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/31 12:55 p.m.16 views

CVE-2025-31623 WordPress Rich Text Editor plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in richtexteditor Rich Text Editor richtexteditor allows Stored XSS.This issue affects Rich Text Editor: from n/a through = 1.0.1...

7.1CVSS0.00131EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/31 12:55 p.m.62 views

CVE-2025-31623

CVE-2025-31623: Affected product is Rich Text Editor (WordPress plugin richtexteditor). The description states a CSRF-related flaw that enables Stored Cross-Site Scripting in versions up to 1.0.1 (and from n/a to 1.0.1). The connected documents corroborate a Rich Text Editor entry indicating Cros...

7.1CVSS7.2AI score0.00131EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 12:55 p.m.6 views

CVE-2025-31623 WordPress Rich Text Editor plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in richtexteditor Rich Text Editor allows Stored XSS. This issue affects Rich Text Editor: from n/a through 1.0.1...

7.1CVSS6.8AI score0.00131EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.6 views

WordPress plugin Rich Text Editor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.4AI score0.00131EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/26 2:41 p.m.8 views

CVE-2025-30549

Cross-Site Request Forgery CSRF vulnerability in Yummly Yummly Rich Recipes yummly-rich-recipes allows Cross Site Request Forgery.This issue affects Yummly Rich Recipes: from n/a through = 4.2...

4.3CVSS7.2AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/24 2:15 p.m.9 views

CVE-2025-30549

Cross-Site Request Forgery CSRF vulnerability in Yummly Yummly Rich Recipes yummly-rich-recipes allows Cross Site Request Forgery.This issue affects Yummly Rich Recipes: from n/a through = 4.2...

4.3CVSS0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/24 1:46 p.m.53 views

CVE-2025-30549

CVE-2025-30549 is a CSRF vulnerability in the WordPress plugin “Yummly Rich Recipes,” affecting versions from unknown up to 4.2. The entry documents a Cross-Site Request Forgery issue with a CVSS 3.1 base score of 4.3 (Medium). Exploitation would require user interaction, and the connected data d...

4.3CVSS7.2AI score0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/24 1:46 p.m.7 views

CVE-2025-30549 WordPress Yummly Rich Recipes plugin <= 4.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Yummly Yummly Rich Recipes allows Cross Site Request Forgery. This issue affects Yummly Rich Recipes: from n/a through 4.2...

4.3CVSS7.2AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/24 1:46 p.m.31 views

CVE-2025-30549 WordPress Yummly Rich Recipes plugin <= 4.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Yummly Yummly Rich Recipes yummly-rich-recipes allows Cross Site Request Forgery.This issue affects Yummly Rich Recipes: from n/a through = 4.2...

4.3CVSS0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:29 p.m.8 views

WordPress Yummly Rich Recipes plugin <= 4.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Yummly Rich Recipes versions = 4.2...

4.3CVSS7AI score0.00197EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/24 12:0 a.m.4 views

ContentTools 代码注入漏洞

ContentTools is a getme open source JS library for building WYSIWYG editors for HTML content. A code injection vulnerability exists in ContentTools 1.6.16 and earlier versions, which stems from a cross-site scripting attack and could lead to a remote attack...

5.4CVSS4.6AI score0.00328EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/03/24 12:0 a.m.4 views

WordPress plugin Yummly Rich Recipes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.6AI score0.00197EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/20 12:0 a.m.7 views

编号撤回

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI Open Source. This CVE number has been withdrawn...

7.6AI score
SaveExploits0References1
Rows per page
Query Builder