Lucene search
+L

141 matches found

NVD
NVD
added 2024/07/22 11:15 a.m.30 views

CVE-2024-38728

Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...

7.2CVSS0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/22 10:22 a.m.18 views

CVE-2024-38728 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...

7.2CVSS7.2AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/22 10:22 a.m.28 views

CVE-2024-38728 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...

7.2CVSS0.00271EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/22 10:22 a.m.62 views

CVE-2024-38728

The CVE-2024-38728 entry concerns a Server-Side Request Forgery (SSRF) vulnerability in the Seraphinite Post .DOCX Source WordPress plugin (Seraphinite Post .DOCX Source). Affected versions are listed as n/a through 2.16.9. Public references indicate this is an SSRF issue where an attacker could ...

7.2CVSS7AI score0.00271EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/22 12:00 a.m.9 views

PT-2024-28174 · Unknown · Seraphinite Post .Docx Source

Name of the Vulnerable Software and Affected Versions: Seraphinite Post .DOCX Source versions n/a through 2.16.9 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially force the server to make requests to arbitrary domains, which...

7.2CVSS6.6AI score0.00271EPSS
SaveExploits0References5
NVD
NVD
added 2024/07/12 2:15 p.m.26 views

CVE-2024-37940

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Accelerator Full, premium.This issue affects Seraphinite Accelerator Full, premium: from n/a through 2.21.13...

7.4CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/12 1:44 p.m.20 views

CVE-2024-37940 WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Accelerator Full, premium.This issue affects Seraphinite Accelerator Full, premium: from n/a through 2.21.13...

7.4CVSS7.5AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/12 1:44 p.m.39 views

CVE-2024-37940 WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Accelerator Full, premium.This issue affects Seraphinite Accelerator Full, premium: from n/a through 2.21.13...

7.4CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/12 1:44 p.m.66 views

CVE-2024-37940

CVE-2024-37940 is a CSRF in the WordPress plugin Seraphinite Accelerator Ext (full/premium) affecting versions up to 2.21.13. The vulnerability can lead to arbitrary file deletion due to CSRF, as documented in public references. A fix is indicated by the plugin’s 2.21.13 release (or subsequent pa...

7.4CVSS7.6AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/12 12:00 a.m.11 views

WordPress plugin Seraphinite Accelerator Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.4CVSS6.7AI score0.00228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/12 12:00 a.m.9 views

PT-2024-27845 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Seraphinite Accelerator Full, premium versions n/a through 2.21.13 Liferay Portal and DXP versions 7.0.0 through 7.4.3.87 Description: A Cross-Site Request Forgery CSRF vulnerability and a medium severity XSS vulnerability have been identifie...

7.4CVSS6.3AI score0.00228EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/07/11 11:54 a.m.9 views

WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Seraphinite Post .DOCX Source versions = 2.16.9...

7.2CVSS7AI score0.00271EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/07/11 11:51 a.m.6 views

WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Seraphinite Post .DOCX Source versions = 2.16.9...

4.3CVSS7AI score0.00372EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/07/11 12:00 a.m.11 views

WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.9 is vulnerable to Broken Access Control

Software Seraphinite Post .DOCX Source Type Plugin Vulnerable versions = 2.16.9 Fixed in 2.16.10 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38727 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 677670691e62 Credits Peng Zhou...

4.3CVSS6.3AI score0.00372EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/07/11 12:00 a.m.15 views

WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.9 is vulnerable to Server Side Request Forgery (SSRF)

Software Seraphinite Post .DOCX Source Type Plugin Vulnerable versions = 2.16.9 Fixed in 2.16.10 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-38728 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

7.2CVSS6.6AI score0.00271EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/07/09 5:03 p.m.12 views

WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability

CSRF Leading to Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Seraphinite Accelerator Full, premium versions = 2.21.13...

7.4CVSS7AI score0.00228EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/07/09 12:00 a.m.23 views

WordPress Seraphinite Accelerator (Full, premium) Plugin <= 2.21.13 is vulnerable to Cross Site Request Forgery (CSRF)

Software Seraphinite Accelerator Full, premium Type Plugin Vulnerable versions = 2.21.13 Fixed in 2.21.13.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37940 Patch priority Low CVSS severity Low 7.4 Developer Claim ownership PSID f1fc1258294f...

7.4CVSS6.7AI score0.00228EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/03/28 7:15 a.m.24 views

CVE-2024-22138

Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47...

5.3CVSS5.3AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/28 6:29 a.m.93 views

CVE-2024-22138

CVE-2024-22138 affects the WordPress Seraphinite Accelerator plugin (versions up to 2.20.47). Root cause: insertion of sensitive information into log files, enabling potential information exposure. Impact is unauthenticated; vulnerable component is the logging path used by the plugin. Remediation...

5.3CVSS8.6AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/28 6:29 a.m.19 views

CVE-2024-22138 WordPress Seraphinite Accelerator plugin <= 2.20.47 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47...

5.3CVSS6.9AI score0.00443EPSS
SaveExploits0References1
Rows per page
Query Builder