Lucene search
+L

12178 matches found

CNNVD
CNNVD
added 2025/02/18 12:00 a.m.11 views

WordPress plugin Simple Map No Api 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.4CVSS8.2AI score0.00295EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/18 12:00 a.m.5 views

WordPress plugin Simple Pricing Tables For WPBakery Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.4CVSS7.8AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/18 12:00 a.m.11 views

PT-2025-6575 · WordPress · Simple Charts

Name of the Vulnerable Software and Affected Versions: Simple Charts plugin for WordPress versions up to, and including, 1.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the simple chart shortcode. This allows authenticated...

6.4CVSS9.3AI score0.00241EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/02/18 12:00 a.m.5 views

WordPress plugin Simple Signup Form SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...

6.5CVSS9.3AI score0.00381EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/02/17 9:58 p.m.7 views

WordPress Simple Pricing Tables For WPBakery Page Builder plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Pricing Tables For WPBakery Page Builder versions = 1.0...

6.4CVSS5.5AI score0.00241EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/02/17 9:57 p.m.9 views

WordPress Simple Signup Form plugin <= 1.6.5 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Signup Form versions = 1.6.5...

6.5CVSS8.1AI score0.00381EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/02/17 9:54 p.m.7 views

WordPress Simple Charts plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Charts versions = 1.0...

6.4CVSS5.7AI score0.00241EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/17 12:25 a.m.13 views

CVE-2024-5461

Implementation of the Simple Network Management Protocol SNMP operating on the Brocade 6547 FC5022 embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only...

8.6CVSS7.2AI score0.00441EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/15 2:23 p.m.21 views

CVE-2025-26543

Cross-Site Request Forgery CSRF vulnerability in Pukhraj Suthar Simple Responsive Menu simple-responsive-menu allows Stored XSS.This issue affects Simple Responsive Menu: from n/a through = 2.1...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/15 2:22 p.m.12 views

CVE-2025-26578

Cross-Site Request Forgery CSRF vulnerability in mathieuhays Simple Documentation client-documentation allows Stored XSS.This issue affects Simple Documentation: from n/a through = 1.2.8...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/15 6:25 a.m.8 views

CVE-2025-0692

The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

3.5CVSS5.6AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
added 2025/02/15 12:15 a.m.18 views

CVE-2024-5461

Implementation of the Simple Network Management Protocol SNMP operating on the Brocade 6547 FC5022 embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only...

8.6CVSS0.00441EPSS
SaveExploits1References1
CVE
CVE
added 2025/02/15 12:06 a.m.60 views

CVE-2024-5461

CVE-2024-5461 affects Brocade Fabric OS on the Brocade 6547 (FC5022) embedded switch blade. The SNMP implementation makes internal script calls to system.sh, allowing an authenticated attacker to injection commands/parameters and potentially execute as root. Affected behavior is the SNMP operatio...

8.6CVSS7.3AI score0.00441EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/02/14 11:02 p.m.5 views

MAL-2025-191803 Malicious code in network-utils-simple (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1fd943d3243197ac153b2623548e62b4225a59f611cf13fe962bc3ced369a32d During installation, there is an attempt to download and execute code. The package has no real functionality. --- Category: MALICIOUS - The campaign has clearl...

7.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/14 11:02 p.m.5 views

Malicious code in network-utils-simple (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1fd943d3243197ac153b2623548e62b4225a59f611cf13fe962bc3ced369a32d During installation, there is an attempt to download and execute code. The package has no real functionality. --- Category: MALICIOUS - The campaign has clearl...

7.7AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/02/14 1:42 p.m.396 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

WordPress CVE-2024-10924 Exploit 📌 Overview This repository...

9.8CVSS7.5AI score0.81722EPSS
SaveExploits21
NVD
NVD
added 2025/02/13 2:16 p.m.19 views

CVE-2025-26578

Cross-Site Request Forgery CSRF vulnerability in mathieuhays Simple Documentation client-documentation allows Stored XSS.This issue affects Simple Documentation: from n/a through = 1.2.8...

7.1CVSS0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/13 2:16 p.m.30 views

CVE-2025-26543

Cross-Site Request Forgery CSRF vulnerability in Pukhraj Suthar Simple Responsive Menu simple-responsive-menu allows Stored XSS.This issue affects Simple Responsive Menu: from n/a through = 2.1...

7.1CVSS0.00143EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/13 1:53 p.m.81 views

CVE-2025-26578

CVE-2025-26578 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Simple Documentation that enables a Stored XSS scenario. The issue affects versions from the earliest release up to and including 1.2.8 . Public vulnerability sources (NVD, CVE List) reference this ...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/13 1:53 p.m.7 views

CVE-2025-26578 WordPress Simple Documentation plugin <= 1.2.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in mathieuhays Simple Documentation allows Stored XSS. This issue affects Simple Documentation: from n/a through 1.2.8...

7.1CVSS6.8AI score0.00143EPSS
SaveExploits0References1
Rows per page
Query Builder