Lucene search
K

21 matches found

EUVD
EUVD
added 2026/03/25 6:31 p.m.1 views

EUVD-2026-15491

Missing Authorization vulnerability in Ruhul Amin My Album Gallery my-album-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Album Gallery: from n/a through = 1.0.4...

5.8AI score0.00013EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 5:16 p.m.0 views

CVE-2026-22485

Missing Authorization vulnerability in Ruhul Amin My Album Gallery my-album-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Album Gallery: from n/a through = 1.0.4...

6.5CVSS0.00013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.1 views

PT-2026-27814

Name of the Vulnerable Software and Affected Versions My Album Gallery versions through 1.0.4 Description An authorization issue exists in Ruhul Amin My Album Gallery. The issue involves exploiting incorrectly configured access control security levels. Recommendations Update My Album Gallery to a...

6.5CVSS5.9AI score0.00013EPSS
Exploits0References3
NVD
NVD
added 2025/12/31 12:16 p.m.3 views

CVE-2025-49358

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ruhul Amin Content Fetcher content-fetcher allows DOM-Based XSS.This issue affects Content Fetcher: from n/a through = 1.1...

6.5CVSS0.00008EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 12:1 p.m.2 views

EUVD-2025-205924

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ruhul Amin Content Fetcher allows DOM-Based XSS.This issue affects Content Fetcher: from n/a through 1.1...

6.5CVSS5.9AI score0.00008EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.6 views

PT-2025-54305

Name of the Vulnerable Software and Affected Versions Ruhul Amin Content Fetcher versions through 1.1 Description The Ruhul Amin Content Fetcher software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-Site Scripting XSS issue. This...

6.5CVSS5.9AI score0.00008EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-3858

Malicious code in bioql PyPI...

7.6CVSS8.9AI score0.00058EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-26814

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00207EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:45 a.m.4 views

CVE-2023-22685

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...

5.9CVSS5.6AI score0.00207EPSS
Exploits0References1
NVD
NVD
added 2023/05/12 4:15 p.m.7 views

CVE-2023-22685

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...

5.9CVSS5.4AI score0.00207EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/12 3:24 p.m.13 views

CVE-2023-22685 WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...

5.9CVSS5.5AI score0.00207EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/12 3:24 p.m.7 views

CVE-2023-22685 WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...

5.9CVSS5.4AI score0.00207EPSS
Exploits0References1
CVE
CVE
added 2023/05/12 3:24 p.m.57 views

CVE-2023-22685

CVE-2023-22685 represents an authenticated stored cross-site scripting (XSS) vulnerability in the WordPress plugin Category Specific RSS feed Subscription (Category Specific RSS feed Menu) for versions

5.9CVSS5.1AI score0.00207EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/05/03 8:15 a.m.8 views

CVE-2023-22691

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...

8.8CVSS5.9AI score0.00106EPSS
Exploits0References1
OSV
OSV
added 2023/05/03 8:15 a.m.1 views

CVE-2023-22691

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/05/03 8:15 a.m.12 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...

6.8CVSS8.7AI score0.00106EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/03 7:33 a.m.11 views

CVE-2023-22691 WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...

4.3CVSS9AI score0.00106EPSS
Exploits0References1
CVE
CVE
added 2023/05/03 7:33 a.m.44 views

CVE-2023-22691

CVE-2023-22691 affects the WordPress plugin Category Specific RSS feed Subscription (Tips and Tricks HQ) &lt;= v2.1. A CSRF vulnerability exists in settings/credential-related actions due to missing CSRF checks, enabling unauthenticated attackers to induce actions on behalf of admins. Patch sourc...

8.8CVSS6.6AI score0.00106EPSS
Exploits0References1Affected Software1
seebug.org
seebug.org
added 2014/09/29 12:0 a.m.44 views

Wordpress All In One WP Security Plugin 3.8.2 - SQL Injection

No description provided by source. Advisory ID: HTB23231 Product: All In One WP Security WordPress plugin Vendor: Tips and Tricks HQ, Peter, Ruhul, Ivy Vulnerable Versions: 3.8.2 and probably prior Tested Version: 3.8.2 Advisory Publication: September 3, 2014 without technical details Vendor...

6.5CVSS6.5AI score0.04936EPSS
Exploits6
0day.today
0day.today
added 2014/09/25 12:0 a.m.41 views

WordPress All In One WP Security Plugin 3.8.2 SQL Injection Vulnerability

WordPress All In One WP Security plugin version 3.8.2 suffers from multiple remote SQL injection vulnerabilities. Product: All In One WP Security WordPress plugin Vendor: Tips and Tricks HQ, Peter, Ruhul, Ivy Vulnerable Versions: 3.8.2 and probably prior Tested Version: 3.8.2 Advisory Publication...

6.5CVSS0.04936EPSS
Exploits6
Rows per page
Query Builder