Lucene search
+L

141 matches found

Vulnrichment
Vulnrichment
added 2023/12/14 2:40 p.m.15 views

CVE-2023-49740 WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seraphinite Solutions Seraphinite Accelerator allows Reflected XSS.This issue affects Seraphinite Accelerator: from n/a through 2.20.28...

7.1CVSS6.9AI score0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/14 2:40 p.m.23 views

CVE-2023-49740 WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seraphinite Solutions Seraphinite Accelerator allows Reflected XSS.This issue affects Seraphinite Accelerator: from n/a through 2.20.28...

7.1CVSS7.2AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/14 12:00 a.m.8 views

PT-2023-31318 · Unknown · Seraphinite Accelerator

Name of the Vulnerable Software and Affected Versions: Seraphinite Accelerator versions through 2.20.28 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions throu...

7.1CVSS9.3AI score0.00415EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.7 views

WordPress and WordPress plugin cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS6AI score0.00415EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/12/01 12:00 a.m.17 views

WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)

Software Seraphinite Accelerator Type Plugin Vulnerable versions = 2.20.28 Fixed in 2.20.29 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49740 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 402f5bb75420 Credits Le Ngoc Anh Required...

7.1CVSS6.5AI score0.00415EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/30 2:15 p.m.9 views

CVE-2023-48279

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/30 2:15 p.m.32 views

CVE-2023-48279

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6...

8.8CVSS0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/30 2:15 p.m.23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6...

6.8CVSS7.2AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/30 1:14 p.m.7 views

CVE-2023-48279 WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6...

4.3CVSS8.7AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/30 1:14 p.m.84 views

CVE-2023-48279

CVE-2023-48279 is a CSRF vulnerability in the Seraphinite Post .DOCX Source WordPress plugin, affecting versions up to 2.16.6. The issue allows CSRF on settings updates and is fixed in version 2.16.7. Remediate by upgrading to 2.16.7 or later; the vulnerability is documented across multiple sourc...

8.8CVSS8.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 1:14 p.m.32 views

CVE-2023-48279 WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6...

4.3CVSS8.9AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/30 12:00 a.m.8 views

WordPress Plugin Seraphinite Post .DOCX Source Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/30 12:00 a.m.11 views

PT-2023-30754 · Unknown · Seraphinite Post .Docx Source

Name of the Vulnerable Software and Affected Versions: Seraphinite Post .DOCX Source versions n/a through 2.16.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...

8.8CVSS8.8AI score0.00256EPSS
SaveExploits0References6
WPVulnDB
WPVulnDB
added 2023/11/28 12:00 a.m.19 views

Seraphinite Post .DOCX Source < 2.16.7 - Settings Update/Reset/Import via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin perform such actions CSRF attacks...

8.8CVSS9AI score0.00256EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/27 5:15 p.m.7 views

CVE-2023-5611

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them...

5.3CVSS5.8AI score0.00268EPSS
SaveExploits2References1
NVD
NVD
added 2023/11/27 5:15 p.m.19 views

CVE-2023-5611

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them...

5.3CVSS0.00268EPSS
SaveExploits2References1
Prion
Prion
added 2023/11/27 5:15 p.m.22 views

Cross site request forgery (csrf)

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them...

5CVSS7.2AI score0.00268EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/11/27 4:22 p.m.35 views

CVE-2023-5611 Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import

The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them...

5.7AI score0.00268EPSS
SaveExploits2References1
CVE
CVE
added 2023/11/27 4:22 p.m.53 views

CVE-2023-5611

CVE-2023-5611 affects the Seraphinite Accelerator WordPress plugin (versions prior to 2.20.32). The vulnerability stems from missing authorization and CSRF protections when resetting/importing settings, allowing unauthenticated users to reset settings. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U...

5.3CVSS5.3AI score0.00268EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/11/27 12:00 a.m.8 views

WordPress plugin Seraphinite Accelerator security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability previously...

5.3CVSS6.8AI score0.00268EPSS
SaveExploits2References1
Rows per page
Query Builder