Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•17 views

CVE-2025-69387

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS5.5AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•14 views

CVE-2025-69387

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS0.00352EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/20 3:46 p.m.•26 views

CVE-2025-69387

CVE-2025-69387 concerns the WordPress plugin Simple Retail Menus (plugin slug: simple-retail-menus) with affected versions

7.5CVSS5.8AI score0.00352EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/20 3:46 p.m.•40 views

CVE-2025-69387 WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS0.00352EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:46 p.m.•12 views

CVE-2025-69387 WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS5.8AI score0.00352EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•18 views

WordPress plugin Simple Retail Menus 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.5CVSS5.8AI score0.00352EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•3 views

CVE-2025-69387: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS5.8AI score0.00352EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/09 10:31 a.m.•17 views

WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Skalucy in WordPress Plugin Simple Retail Menus versions = 4.2.1...

7.5CVSS5.5AI score0.00352EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2014-5081

Malware in sbrugna...

6.5CVSS6.4AI score0.01594EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/22 4:15 a.m.•16 views

CVE-2014-5183

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

6.5CVSS8.4AI score0.01594EPSS
SaveExploits1References1
NVD
NVD
•added 2014/08/06 7:55 p.m.•30 views

CVE-2014-5183

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

6.5CVSS8AI score0.01594EPSS
SaveExploits1References2
Prion
Prion
•added 2014/08/06 7:55 p.m.•29 views

Sql injection

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

6.5CVSS8.7AI score0.01594EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2014/08/06 7:00 p.m.•39 views

CVE-2014-5183

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

8AI score0.01594EPSS
SaveExploits1References2
CVE
CVE
•added 2014/08/06 7:00 p.m.•51 views

CVE-2014-5183

The CVE concerns the WordPress Simple Retail Menus plugin (before 4.1). The vulnerability is an SQL injection in includes/mode-edit.php exposed via the targetmenu parameter in an edit action to wp-admin/admin.php, exploitable by remote authenticated editors. Impact is arbitrary SQL execution with...

6.5CVSS8.3AI score0.01594EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2014/08/06 12:00 a.m.•4 views

PT-2014-6322

Name of the Vulnerable Software and Affected Versions Simple Retail Menus plugin versions prior to 4.1 Description The issue allows remote authenticated editors to execute arbitrary SQL commands. This is achieved by exploiting the targetmenu parameter in an edit action to the "wp-admin/admin.php"...

6.5CVSS0.01594EPSS
SaveExploits1References4
Patchstack
Patchstack
•added 2014/08/06 12:00 a.m.•28 views

WordPress Simple Retail Menus Plugin <= 4.0 - SQL Injection

Because of this vulnerability in includes/mode-edit.php, remote authenticated editors can execute arbitrary SQL commands in an edit action to wp-admin/admin.php via the "targetmenu" parameter. Solution Update the plugin...

6.5CVSS6.5AI score0.01594EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/08/06 12:00 a.m.•5 views

CVE-2014-5183: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

6.5CVSS6.4AI score0.01594EPSS
SaveExploits1References2
Rows per page
Query Builder