Lucene search
K

42 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-9265

Malware in sbrugna...

5.4CVSS5.6AI score0.00137EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-24897

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.0014EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-14725

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00257EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-45655

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00285EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:40 a.m.3 views

CVE-2024-51858

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps Social Locker social-locker-content allows Stored XSS.This issue affects Social Locker: from n/a through = 1.1...

6.5CVSS7.2AI score0.00285EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:5 p.m.3 views

CVE-2022-1608

The OnePress Social Locker WordPress plugin through 5.6.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.7AI score0.0014EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:7 a.m.5 views

CVE-2015-9425

The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=opanda-item=license-manager-sociallocker-next licensekey parameter...

5.4CVSS6.1AI score0.00137EPSS
Exploits1References1
OSV
OSV
added 2025/05/15 8:15 p.m.1 views

CVE-2024-11189

The Social Share And Social Locker WordPress plugin before 1.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

4.8CVSS7.3AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:6 p.m.3 views

CVE-2024-11189 Social Share And Social Locker – ARSocial < 1.4.2 - Admin+ Stored XSS

The Social Share And Social Locker WordPress plugin before 1.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

4.7AI score0.00253EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.1 views

WordPress plugin Social Share And Social Locker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.8CVSS7.6AI score0.00253EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/05 2:20 p.m.4 views

CVE-2025-31902

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Reflected XSS.This issue affects Social Share And Social Locker: from n/a through = 1.4.1...

7.1CVSS7.2AI score0.00257EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/05 2:19 p.m.7 views

CVE-2025-31911

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through = 1.4.2...

9.3CVSS7.3AI score0.00148EPSS
Exploits0References1
NVD
NVD
added 2025/04/03 2:15 p.m.5 views

CVE-2025-31911

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through = 1.4.2...

9.3CVSS0.00148EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/03 1:27 p.m.15 views

CVE-2025-31911 WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through = 1.4.2...

9.3CVSS0.00148EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/03 1:27 p.m.10 views

CVE-2025-31902 WordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Reflected XSS.This issue affects Social Share And Social Locker: from n/a through = 1.4.1...

7.1CVSS0.00257EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/03 12:0 a.m.1 views

PT-2025-14755 · Unknown · Social Share/Social Locker

Name of the Vulnerable Software and Affected Versions: Social Share And Social Locker versions 1.4.2 and earlier Description: The issue is related to improper neutralization of special elements used in SQL commands, allowing Blind SQL Injection. This can be exploited due to the improper handling ...

9.3CVSS9.3AI score0.00148EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.1 views

WordPress plugin Social Share And Social Locker SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

9.3CVSS9.2AI score0.00148EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.2 views

WordPress plugin Social Share And Social Locker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.8AI score0.00257EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/04 1:8 a.m.2 views

WordPress Social Share And Social Locker – ARSocial plugin <= 1.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Social Share And Social Locker versions = 1.4.1...

4.8CVSS5.7AI score0.00253EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2024/11/19 5:15 p.m.5 views

CVE-2024-51858

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps Social Locker social-locker-content allows Stored XSS.This issue affects Social Locker: from n/a through = 1.1...

6.5CVSS0.00285EPSS
Exploits0References1
Rows per page
Query Builder