Lucene search
K

30 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:27 a.m.1 views

CVE-2023-45066

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Smackcoders Export All Posts, Products, Orders, Refunds & Users.This issue affects Export All Posts, Products, Orders, Refunds & Users: from n/a through 2.4.1...

7.5CVSS7.4AI score0.00348EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-49387

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00348EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8362

Malicious code in bioql PyPI...

8.5CVSS9AI score0.00188EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-33971

Malicious code in bioql PyPI...

7.5CVSS7.9AI score0.00618EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-3171

Malicious code in bioql PyPI...

4.3CVSS8.7AI score0.00208EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3815

Malicious code in bioql PyPI...

4.9CVSS8.9AI score0.00464EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-40614

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.18426EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:40 a.m.2 views

CVE-2025-24611

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

4.9CVSS7.2AI score0.00464EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:49 a.m.2 views

CVE-2023-2487

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Smackcoders Export All Posts, Products, Orders, Refunds & Users.This issue affects Export All Posts, Products, Orders, Refunds & Users: from n/a through 2.4.1...

7.5CVSS7.7AI score0.00618EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/23 12:0 a.m.1 views

PT-2025-22781 · Smackcoders · Smackcoders Lead Form Data Collection To Crm

Name of the Vulnerable Software and Affected Versions: smackcoders Lead Form Data Collection to CRM versions n/a through 3.1 Description: The issue is related to a Missing Authorization vulnerability that allows Privilege Escalation in smackcoders Lead Form Data Collection to CRM. Recommendations...

8.8CVSS8.8AI score0.00254EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/03 3:38 p.m.2 views

CVE-2025-31775

Cross-Site Request Forgery CSRF vulnerability in Smackcoders Inc., Google SEO Pressor Snippet google-seo-author-snippets allows Cross Site Request Forgery.This issue affects Google SEO Pressor Snippet: from n/a through = 2.0...

4.3CVSS7.2AI score0.00324EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.4 views

CVE-2025-31788 WordPress AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin <= 1.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug allows Retrieve Embedded Sensitive Data. This issue affects AIO Performance Profiler, Monitor, Optimize, Compress & Debug: from n/a through 1.2...

5.3CVSS7.1AI score0.00566EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.8 views

PT-2025-14174 · Unknown · Smackcoders Aio Performance Profiler

Name of the Vulnerable Software and Affected Versions: smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug versions 1.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files...

5.3CVSS6.1AI score0.00566EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/03/29 11:40 a.m.3 views

CVE-2025-30810

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Smackcoders Inc., Lead Form Data Collection to CRM wp-leads-builder-any-crm allows Blind SQL Injection.This issue affects Lead Form Data Collection to CRM: from n/a through = 3.0.1...

8.5CVSS7.3AI score0.00188EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:53 p.m.12 views

CVE-2024-43965

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.4...

9.8CVSS7.6AI score0.18426EPSS
Exploits1
NVD
NVD
added 2025/01/24 6:15 p.m.3 views

CVE-2025-24611

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

4.9CVSS0.00464EPSS
Exploits0References1
CVE
CVE
added 2025/01/24 5:24 p.m.43 views

CVE-2025-24611

CVE-2025-24611 : Path traversal vulnerability in Smackcoders WP Ultimate Exporter (affected: versions n/a through 2.9) allows Absolute Path Traversal due to improper pathname restriction. This can enable arbitrary file reads from the server. Root cause is failure to correctly constrain paths to r...

4.9CVSS7.2AI score0.00464EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 5:24 p.m.6 views

CVE-2025-24611 WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

4.9CVSS7.2AI score0.00464EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:5 p.m.10 views

CVE-2025-23423 WordPress SendGrid for WordPress plugin <= 1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Smackcoders SendGrid for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SendGrid for WordPress: from n/a through 1.4...

4.3CVSS7.3AI score0.00208EPSS
Exploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.4 views

CVE-2024-56278

Improper Control of Generation of Code 'Code Injection' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through = 2.9.1...

9.1CVSS0.55539EPSS
Exploits0References1
Rows per page
Query Builder