Lucene search
+L

12 matches found

Cvelist
Cvelist
•added 2025/11/12 11:05 a.m.•23 views

CVE-2025-11454 Specific Content For Mobile – Customize the mobile version without redirections <= 0.5.5 - Authenticated (Contributor+) SQL Injection

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS0.00319EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•0 views

CVE-2025-11454: Improper Neutralization of Special Elements used in an SQL Command

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.7AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•10 views

WordPress plugin Specific Content For Mobile – Customize the mobile version without redirections SQL注入漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin...

6.5CVSS7.2AI score0.00319EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/29 12:16 p.m.•29 views

CVE-2025-30874

Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile specific-content-for-mobile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specific Content For Mobile: from n/a through = 0.5.3...

4.3CVSS7.2AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 11:15 a.m.•17 views

CVE-2025-30874

Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile specific-content-for-mobile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specific Content For Mobile: from n/a through = 0.5.3...

4.3CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 10:55 a.m.•69 views

CVE-2025-30874

CVE-2025-30874 is a Missing Authorization vulnerability in Specific Content For Mobile (WordPress plugin). The issue arises from incorrectly configured access control, enabling exploitation as described in the connected documents. Affected versions: from n/a through 0.5.3. Current status: patched."

4.3CVSS7.2AI score0.0042EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/27 10:55 a.m.•8 views

CVE-2025-30874 WordPress Specific Content For Mobile plugin <= 0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile specific-content-for-mobile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specific Content For Mobile: from n/a through = 0.5.3...

4.3CVSS7.3AI score0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•1 views

CVE-2025-30874: Missing Authorization

Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile specific-content-for-mobile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specific Content For Mobile: from n/a through = 0.5.3...

4.3CVSS5.9AI score0.0042EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:58 a.m.•14 views

CVE-2024-29126

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Mortellaro Specific Content For Mobile – Customize the mobile version without redirections allows Reflected XSS.This issue affects Specific Content For Mobile – Customize the mobile version...

7.1CVSS8.6AI score0.00392EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/19 3:15 p.m.•23 views

CVE-2024-29126

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Mortellaro Specific Content For Mobile – Customize the mobile version without redirections allows Reflected XSS.This issue affects Specific Content For Mobile – Customize the mobile version...

7.1CVSS6.9AI score0.00392EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/19 2:18 p.m.•12 views

CVE-2024-29126 WordPress Specific Content For Mobile plugin <= 0.1.9.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Mortellaro Specific Content For Mobile – Customize the mobile version without redirections allows Reflected XSS.This issue affects Specific Content For Mobile – Customize the mobile version...

7.1CVSS6.9AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/19 12:00 a.m.•2 views

CVE-2024-29126: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Mortellaro Specific Content For Mobile – Customize the mobile version without redirections allows Reflected XSS.This issue affects Specific Content For Mobile – Customize the mobile version...

7.1CVSS5.8AI score0.00392EPSS
SaveExploits0References2
Rows per page
Query Builder