Lucene search
+L

4 matches found

CNVD
CNVD
added 2025/11/05 12:0 a.m.14 views

WordPress Depicter plugin cross-site request forgery vulnerability

WordPress Depicter plugin is a slider, popup and rotator image creation tool designed for WordPress, offering a no-code interface and rich customization features. The WordPress Depicter plugin suffers from a cross-site request forgery vulnerability, which originates from a web application that do...

4.3CVSS6.8AI score0.00159EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2017-0189

Malware in sbrugna...

5.8CVSS6.4AI score0.01367EPSS
SaveExploits0References7
Prion
Prion
added 2014/12/25 11:59 a.m.19 views

Design/Logic Flaw

The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtain sensitive information, and potentially obtain the ability to spoof requests to non-CORS routes, via a crafted web si...

5.8CVSS6.7AI score0.01367EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2014/12/25 11:0 a.m.46 views

CVE-2014-7193

The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtain sensitive information, and potentially obtain the ability to spoof requests to non-CORS routes, via a crafted web si...

6.2AI score0.01367EPSS
SaveExploits0References2
Rows per page
Query Builder