Lucene search
+L

177 matches found

WPVulnDB
WPVulnDB
added 2024/05/16 12:0 a.m.14 views

ShortPixel Adaptive Images < 3.8.4 - Cross-Site Request Forgery

Description The ShortPixel Adaptive Images plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the import-settings page. This makes it possible for unauthenticated attackers to import...

4.3CVSS6.6AI score0.00252EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/05/15 12:0 a.m.13 views

ShortPixel Adaptive Images < 3.8.4 - Authenticated (Admin+) Server-Side Request Forgery

Description The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.8.3 via the isourcdn function. This makes it possible for unauthenticated attackers to make web requests to...

4.4CVSS6.4AI score0.00363EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/05/14 3:44 p.m.12 views

CVE-2024-4689

Cross-Site Request Forgery CSRF vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Images: from n/a through = 3.8.3...

4.3CVSS5AI score0.00252EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/14 3:39 p.m.22 views

CVE-2024-35172

Server-Side Request Forgery SSRF vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Images: from n/a through = 3.8.3...

4.4CVSS5.2AI score0.00363EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.6 views

WordPress plugin ShortPixel Adaptive Images 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

4.3CVSS6.7AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.3 views

WordPress plugin ShortPixel Adaptive Images 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

4.4CVSS6.9AI score0.00363EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/05/13 8:38 a.m.12 views

CVE-2024-35172 WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in ShortPixel ShortPixel Adaptive Images.This issue affects ShortPixel Adaptive Images: from n/a through 3.8.3...

4.4CVSS7AI score0.00363EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/13 8:38 a.m.49 views

CVE-2024-35172

CVE-2024-35172 describes a Server-Side Request Forgery (SSRF) in ShortPixel ShortPixel Adaptive Images for WordPress, affecting versions up to 3.8.3 (from n/a through 3.8.3). Connected sources confirm the vulnerability type, affected product (ShortPixel Adaptive Images), and root cause (SSRF), wi...

4.4CVSS5.9AI score0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/13 8:38 a.m.34 views

CVE-2024-35172 WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Images: from n/a through = 3.8.3...

4.4CVSS5.5AI score0.00363EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/13 12:0 a.m.6 views

PT-2024-26354 · Shortpixel · Shortpixel Adaptive Images

Name of the Vulnerable Software and Affected Versions: ShortPixel Adaptive Images versions 3.8.3 and earlier Description: A Server-Side Request Forgery SSRF issue has been identified. This allows an attacker to trick the server into making unintended requests, potentially leading to unauthorized...

4.4CVSS6.9AI score0.00363EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/05/10 2:5 p.m.7 views

WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin ShortPixel Adaptive Images versions = 3.8.3...

4.4CVSS7AI score0.00363EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/10 8:23 a.m.11 views

CVE-2024-4689 WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Images: from n/a through = 3.8.3...

4.3CVSS5.9AI score0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/10 8:23 a.m.33 views

CVE-2024-4689

Technical details on CVE-2024-4689 are not provided in the connected documents; no specifics on affected version ranges, impact, or fixes are available. Monitor for official updates.

4.3CVSS5.9AI score0.00252EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/10 8:23 a.m.22 views

CVE-2024-4689 WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Images: from n/a through = 3.8.3...

4.3CVSS5.3AI score0.00252EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/05/10 12:0 a.m.15 views

WordPress ShortPixel Adaptive Images Plugin <= 3.8.3 is vulnerable to Server Side Request Forgery (SSRF)

Software ShortPixel Adaptive Images Type Plugin Vulnerable versions = 3.8.3 Fixed in 3.8.4 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-35172 Patch priority Low CVSS severity Low 4.4 Developer ShortPixel PSID 719a27565a33 Credits...

4.4CVSS6.6AI score0.00363EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/05/09 2:1 p.m.9 views

WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin ShortPixel Adaptive Images versions = 3.8.3...

4.3CVSS7AI score0.00252EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/05/09 12:0 a.m.13 views

WordPress ShortPixel Adaptive Images Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software ShortPixel Adaptive Images Type Plugin Vulnerable versions = 3.8.3 Fixed in 3.8.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4689 Patch priority Low CVSS severity Low 4.3 Developer ShortPixel PSID c5c0445d5c36 Credits Dhabaleshwar D...

4.3CVSS6.6AI score0.00252EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/05/03 8:15 a.m.23 views

CVE-2024-32810

Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: from n/a through 1.0.2...

7.6CVSS7.5AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/03 7:38 a.m.51 views

CVE-2024-32810

CVE-2024-32810 concerns the WordPress plugin ShortPixel Critical CSS. Public records indicate a Missing Authorization vulnerability affecting ShortPixel Critical CSS versions from n/a up to and including 1.0.2. The CVE’s collected data shows a CVSS v3.1 base score of 7.6 (HIGH) with network attac...

7.6CVSS5.1AI score0.00431EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 7:38 a.m.14 views

CVE-2024-32810 WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: from n/a through 1.0.2...

7.6CVSS6.9AI score0.00431EPSS
SaveExploits0References1
Rows per page
Query Builder