Lucene search
+L

119 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 6:09 a.m.20 views

CVE-2024-49684

Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

7.2CVSS5.9AI score0.00531EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:33 p.m.13 views

CVE-2024-48020

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

8.5CVSS5.9AI score0.00487EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2025/01/10 7:46 p.m.22 views

Metasploit Wrap-Up 01/10/2025

New module content 5 OneDev Unauthenticated Arbitrary File Read Authors: Siebene and vultza Type: Auxiliary Pull request: 19614 contributed by vultza Path: gather/onedevarbitraryfileread AttackerKB reference: CVE-2024-45309 Description: This adds an exploit module for an unauthenticated arbitrary...

8.7CVSS9.7AI score0.24531EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2024/11/21 4:01 a.m.463 views

Exploit for Unrestricted Upload of File with Dangerous Type in Revmakx Backup_And_Staging_By_Wp_Time_Capsule

CVE-2024-8856 This tool scans WordPress websites for vulnerab...

9.8CVSS9.8AI score0.94004EPSS
SaveExploits7
Patchstack
Patchstack
added 2024/11/18 7:31 a.m.12 views

WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Rein Daelman trein in WordPress Plugin Backup and Staging by WP Time Capsule versions = 1.22.21...

9.8CVSS7AI score0.94004EPSS
SaveExploits7References1Affected Software1
NVD
NVD
added 2024/11/16 5:15 a.m.39 views

CVE-2024-8856

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticat...

9.8CVSS0.94004EPSS
SaveExploits7References5
OSV
OSV
added 2024/11/16 5:15 a.m.7 views

CVE-2024-8856

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticat...

9.8CVSS7.9AI score0.94004EPSS
SaveExploits7References5
CNNVD
CNNVD
added 2024/11/16 12:00 a.m.17 views

WordPress plugin Backup and Staging by WP Time Capsule 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.8CVSS9.1AI score0.94004EPSS
SaveExploits7References5
Metasploit
Metasploit
added 2024/11/15 12:00 a.m.732 views

WordPress WP Time Capsule Arbitrary File Upload to RCE

This module exploits an arbitrary file upload vulnerability in the WordPress WP Time Capsule plugin versions use exploit/multi/http/wp/timecapsulefileuploadrce msf undefinedtimecapsulefileuploadrce show actions ...actions... msf undefinedtimecapsulefileuploadrce set ACTION msf...

9.8CVSS9.1AI score0.94004EPSS
SaveExploits7
NVD
NVD
added 2024/10/23 4:15 p.m.43 views

CVE-2024-49684

Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

7.2CVSS0.00531EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/23 3:13 p.m.69 views

CVE-2024-49684

CVE-2024-49684 refers to a Deserialization of Untrusted Data vulnerability in the WordPress plugin “Backup and Staging by WP Time Capsule” (versions

7.2CVSS5.9AI score0.00531EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 3:13 p.m.21 views

CVE-2024-49684 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

7.2CVSS5.9AI score0.00531EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/23 12:00 a.m.17 views

PT-2024-33637 · Wp Time Capsule · Backup/Staging By Wp Time Capsule

Name of the Vulnerable Software and Affected Versions: Backup and Staging by WP Time Capsule versions 1.22.21 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.22.21 and earlier, update to a version...

7.2CVSS6.8AI score0.00531EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.10 views

WordPress plugin Backup and Staging by WP Time Capsule 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

7.2CVSS7.2AI score0.00531EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/21 9:27 a.m.9 views

WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Backup and Staging by WP Time Capsule versions = 1.22.21...

7.2CVSS7.3AI score0.00531EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/10/11 7:15 p.m.24 views

CVE-2024-48020

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

8.5CVSS0.00487EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/11 6:15 p.m.66 views

CVE-2024-48020

CVE-2024-48020 : SQL Injection in Revmakx Backup and Staging by WP Time Capsule (plugin) up to version 1.22.21. Root cause: improper neutralization of input in SQL commands. Impact: high risk of data exposure/alteration via network access (CVSS v3.1 base 8.5). Affected: Backup and Staging by WP T...

8.5CVSS5.9AI score0.00487EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/11 6:15 p.m.40 views

CVE-2024-48020 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

8.5CVSS0.00487EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/11 6:15 p.m.26 views

CVE-2024-48020 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

8.5CVSS5.6AI score0.00487EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/11 12:00 a.m.17 views

PT-2024-32937 · Wp Time Capsule · Revmakx Backup/Staging

Name of the Vulnerable Software and Affected Versions: Revmakx Backup and Staging by WP Time Capsule versions 1.22.21 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

8.5CVSS7.9AI score0.00487EPSS
SaveExploits0References6
Rows per page
Query Builder