Lucene search
+L

1485 matches found

CNNVD
CNNVD
added 2025/04/17 12:0 a.m.7 views

WordPress plugin Broken Links Remover 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.6 views

WordPress plugin mLanguage 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS7.1AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.6 views

WordPress plugin Amazon Showcase WordPress Plugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.7 views

WordPress plugin Icegram Express 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

3.5CVSS5.6AI score0.00256EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.8 views

WordPress plugin Revision Diet 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS7.1AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.3 views

WordPress plugin spam-stopper 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS7.1AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.5 views

WordPress plugin WP Social Bookmarking 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.8 views

WordPress plugin WP Sticky Side Buttons 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 6:15 a.m.6 views

CVE-2024-10680

The Form Maker by 10Web WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00256EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 2:12 a.m.24 views

CVE-2024-13452 Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action

The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29. This is due to missing or incorrect nonce validation on a saveAsCopy function. This makes it possible for unauthenticated attackers to update settings and...

6.1CVSS0.00301EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.4 views

WordPress plugin Right Click Disable OR Ban 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

7.1CVSS7.1AI score0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.4 views

WordPress plugin Checkout Files Upload for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.8AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.4 views

WordPress plugin RS Elements Elementor Addon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6.7AI score0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.5 views

WordPress plugin Additional Custom Product Tabs for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.5CVSS6.6AI score0.00252EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.4 views

CodeAstro Internet Banking System 安全漏洞

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 2.0.0, which is caused by stored cross-site scripting in the name parameter...

4.8CVSS6AI score0.00256EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.4 views

PT-2025-15761 · Unknown · Ab-Tools Flags Widget

Name of the Vulnerable Software and Affected Versions: ab-tools Flags Widget versions 1.0.0 through 1.0.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Flags Widget. Recommendations: For versions 1.0.0 through 1.0.7, update to a...

7.1CVSS7.3AI score0.00197EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.3 views

WordPress plugin NewsBoard Post and RSS Scroller 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.6 views

WordPress plugin Easy Custom CSS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS7.2AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.7 views

WordPress plugin WP Editor.md – The Perfect WordPress Markdown Editor 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin WP Editor.md - A cross-site scripting...

5.9CVSS6.2AI score0.00384EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.4 views

WordPress plugin WP-Easy Menu 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

7.1CVSS7.1AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder