Lucene search
+L

7 matches found

CNVD
CNVD
•added 2025/10/21 12:00 a.m.•13 views

WordPress TARIFFUXX plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress TARIFFUXX plugin suffers from a SQL injection vulnerability that stems from insufficient cleanup of the tariffuxxconfigurator shortcode for user-supplied input, which...

6.5CVSS6.1AI score0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/16 8:33 a.m.•16 views

CVE-2025-10682

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/15 9:15 a.m.•15 views

CVE-2025-10682

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS0.00308EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/15 8:26 a.m.•31 views

CVE-2025-10682 TARIFFUXX <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS0.00308EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/15 8:26 a.m.•14 views

EUVD-2025-34535

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/15 12:00 a.m.•2 views

PT-2025-42303

Name of the Vulnerable Software and Affected Versions TARIFFUXX plugin for WordPress versions up to and including 1.4 Description The software contains a SQL Injection issue because of inadequate handling of user-provided data within SQL queries. Attackers with Contributor-level access or higher...

6.5CVSS5.6AI score0.00308EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/10/15 12:00 a.m.•18 views

WordPress plugin TARIFFUXX SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress TARIFFUXX plugin suffers from a SQL injection vulnerability that stems from insufficient cleanup of the tariffuxxconfigurator shortcode for user-supplied input, which...

6.5CVSS6.1AI score0.00308EPSS
SaveExploits0References4
Rows per page
Query Builder