Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:32 a.m.5 views

CVE-2017-18582

The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues...

6.1CVSS6.2AI score0.0021EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/06 5:54 a.m.1 views

CVE-2025-10055

The Time Sheets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on several endpoints. This makes it possible for unauthenticated attackers to perform a variety of actions via a forge...

4.3CVSS5.3AI score0.00013EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/05 7:50 a.m.4 views

WordPress Time Sheets plugin <= 2.1.3 - Use of Known Vulnerable Component vulnerability

Use of Known Vulnerable Component vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Time Sheets versions = 2.1.3...

6.1CVSS6.2AI score0.00664EPSS
Exploits2References1Affected Software1
NVD
NVD
added 2025/12/05 6:16 a.m.3 views

CVE-2025-10055

The Time Sheets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on several endpoints. This makes it possible for unauthenticated attackers to perform a variety of actions via a forge...

4.3CVSS0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/05 5:31 a.m.1 views

EUVD-2025-201375

The Time Sheets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on several endpoints. This makes it possible for unauthenticated attackers to perform a variety of actions via a forge...

4.3CVSS4.9AI score0.00013EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/05 5:31 a.m.23 views

CVE-2025-10055 Time Sheets <= 2.1.3 - Cross-Site Request Forgery

The Time Sheets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on several endpoints. This makes it possible for unauthenticated attackers to perform a variety of actions via a forge...

4.3CVSS0.00013EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/05 5:31 a.m.2 views

CVE-2025-10055 Time Sheets <= 2.1.3 - Cross-Site Request Forgery

The Time Sheets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on several endpoints. This makes it possible for unauthenticated attackers to perform a variety of actions via a forge...

4.3CVSS5AI score0.00013EPSS
Exploits0References2
CVE
CVE
added 2025/12/05 5:31 a.m.12 views

CVE-2025-10055

CVE-2025-10055 concerns the Time Sheets plugin for WordPress. The vulnerability is a Cross-Site Request Forgery (CSRF) in all versions up to 2.1.3 caused by missing or incorrect nonce validation on several endpoints. This could allow unauthenticated attackers to cause administrators to perform ac...

4.3CVSS5AI score0.00013EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.1 views

WordPress plugin Time Sheets 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.1 views

PT-2025-49198

The Time Sheets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on several endpoints. This makes it possible for unauthenticated attackers to perform a variety of actions via a forge...

4.3CVSS5.3AI score0.00013EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/12/04 10:50 p.m.2 views

WordPress Time Sheets plugin <= 2.1.3 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin Time Sheets versions = 2.1.3...

4.3CVSS6.7AI score0.00013EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-1418

Malware in sbrugna...

4.3CVSS6.4AI score0.07892EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-1419

Malware in sbrugna...

5CVSS6.4AI score0.04011EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-9697

Malware in sbrugna...

6.1CVSS6.3AI score0.0021EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-24762

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.1 views

CVE-2025-49054

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mrdenny Time Sheets time-sheets allows Reflected XSS.This issue affects Time Sheets: from n/a through = 2.1.3...

7.1CVSS5.9AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 11:15 a.m.1 views

CVE-2025-49054

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mrdenny Time Sheets time-sheets allows Reflected XSS.This issue affects Time Sheets: from n/a through = 2.1.3...

7.1CVSS0.00051EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.7 views

CVE-2025-49054 WordPress Time Sheets plugin <= 2.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mrdenny Time Sheets time-sheets allows Reflected XSS.This issue affects Time Sheets: from n/a through = 2.1.3...

7.1CVSS0.00051EPSS
Exploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.9 views

CVE-2025-49054

CVE-2025-49054 is a reflected XSS vulnerability in the WordPress plugin Time Sheets (mrdenny Time Sheets), affecting versions up to 2.1.3. The issue arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Public references indicate an advisor...

7.1CVSS5.9AI score0.00051EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.1 views

CVE-2025-49054 WordPress Time Sheets plugin <= 2.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mrdenny Time Sheets allows Reflected XSS. This issue affects Time Sheets: from n/a through 2.1.3...

7.1CVSS7.2AI score0.00051EPSS
Exploits0References1
Rows per page
Query Builder