Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-50052

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00084EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:0 a.m.5 views

CVE-2023-45763

Cross-Site Request Forgery CSRF vulnerability in Taggbox plugin = 2.9 versions...

8.8CVSS7.1AI score0.00084EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.0 views

WordPress plugin Taggbox 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.7AI score0.00162EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:23 p.m.7 views

CVE-2023-33215 WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Taggbox Taggbox taggbox-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taggbox: from n/a through = 3.3...

5.4CVSS8.5AI score0.00107EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 2:23 p.m.10 views

CVE-2023-33215 WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Taggbox Taggbox taggbox-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taggbox: from n/a through = 3.3...

5.4CVSS0.00107EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/07/11 12:0 a.m.8 views

WordPress Taggbox Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Taggbox Type Plugin Vulnerable versions = 3.3 Fixed in 3.4 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-38754 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4e6bfed63b1b Credits Majed Refaea Required privilege...

6.4AI score0.00162EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/08 5:13 p.m.3 views

CVE-2023-52225 WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1...

10CVSS9.7AI score0.00827EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/08 5:13 p.m.15 views

CVE-2023-52225 WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1...

10CVSS9.6AI score0.00827EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/12/18 3:48 p.m.15 views

CVE-2023-33214 WordPress Taggbox Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1...

5.4CVSS7AI score0.00053EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/12/18 3:48 p.m.20 views

CVE-2023-33214 WordPress Taggbox Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1...

5.4CVSS8.9AI score0.00053EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/10/19 12:0 a.m.7 views

WordPress Taggbox Plugin <= 3.3 is vulnerable to Broken Access Control

Software Taggbox Type Plugin Vulnerable versions = 3.3 Fixed in 3.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-33215 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 74a01c79e50d Credits Jonas Höbenreich Required privilege...

6.5AI score0.00107EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/10/16 11:15 a.m.2 views

CVE-2023-45763

Cross-Site Request Forgery CSRF vulnerability in Taggbox plugin = 2.9 versions...

8.8CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/10/16 11:15 a.m.10 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Taggbox plugin = 2.9 versions...

6.8CVSS8.8AI score0.00084EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/16 10:15 a.m.96 views

CVE-2023-45763

CVE-2023-45763 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Taggbox plugin, reported for versions up to and including 2.9. The consolidated evidence from connected sources attributes the issue to CSRF weaknesses (missing/incorrect nonce validation) that could ...

8.8CVSS7.1AI score0.00084EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/16 10:15 a.m.16 views

CVE-2023-45763 WordPress Taggbox Plugin <= 2.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Taggbox plugin = 2.9 versions...

5.4CVSS9AI score0.00084EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/10/16 12:0 a.m.2 views

PT-2023-29678 · WordPress · Taggbox

Name of the Vulnerable Software and Affected Versions: Taggbox plugin versions = 2.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to...

8.8CVSS8.4AI score0.00084EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/10/16 12:0 a.m.2 views

WordPress Plugin Taggbox - UGC Galleries, Social Media Widgets, User Reviews & Analytics Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Taggbox -...

8.8CVSS6.6AI score0.00084EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/10/12 12:0 a.m.7 views

WordPress Taggbox Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Taggbox Type Plugin Vulnerable versions = 3.3 Fixed in 3.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-33214 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID a8f13ff24040 Credits Jonas Höbenreich Required...

8.8CVSS6.6AI score0.00053EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder