Lucene search
+L

591 matches found

Patchstack
Patchstack
added 2023/07/18 12:00 a.m.13 views

WordPress WordPress Google Translate Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Google Translate Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 51f43d98ec48 Credits Rafie Muhammad Patchstack...

6.2AI score0.00272EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
added 2023/07/06 5:19 a.m.5 views

translate.academic.ru Cross Site Scripting vulnerability OBB-3480047

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/07/05 2:00 a.m.22 views

Google plans to scrape everything you post online to train its AI

Additions to Googles Privacy Policy are making some observers worry that all of your content is about to be fed into Google's AI tools. Alterations to the T&Cs now explicitly state that your "publicly available information" will be used to train in-house Google AI models alongside other products...

6.5AI score
SaveExploits0
OSV
OSV
added 2023/06/16 11:15 a.m.8 views

CVE-2023-26515

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ko Takagi Simple Slug Translate plugin = 2.7.2 versions...

4.8CVSS6.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/16 10:41 a.m.12 views

CVE-2023-26515 WordPress Simple Slug Translate Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ko Takagi Simple Slug Translate plugin = 2.7.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/16 10:41 a.m.53 views

CVE-2023-26515

CVE-2023-26515 affects the WordPress plugin Simple Slug Translate (Ko Takagi) , versioned ≤ 2.7.2. The issue is a Stored XSS requiring admin+ privileges . A fix is available in version 2.7.3 ; affected users should upgrade to 2.7.3 or later. Other sources corroborate the same vulnerability scope ...

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/16 12:00 a.m.12 views

PT-2023-20694 · Unknown · Ko Takagi Simple Slug Translate

Name of the Vulnerable Software and Affected Versions: Ko Takagi Simple Slug Translate plugin versions prior to 2.7.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to...

5.9CVSS5.3AI score0.00369EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/06/16 12:00 a.m.8 views

WordPress plugin Simple Slug Translate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.2AI score0.00369EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/09 6:15 a.m.41 views

CVE-2023-0832

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the installweglot function called via the adminactioninstallweglot action. This makes it possible for...

4.3CVSS4.3AI score0.00243EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/09 6:15 a.m.11 views

CVE-2023-0832

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the installweglot function called via the adminactioninstallweglot action. This makes it possible for...

4.3CVSS6.3AI score0.00243EPSS
SaveExploits0References2
Prion
Prion
added 2023/06/09 6:15 a.m.26 views

Cross site request forgery (csrf)

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the installweglot function called via the adminactioninstallweglot action. This makes it possible for...

4.3CVSS4.3AI score0.00243EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/09 5:33 a.m.13 views

CVE-2023-0832 Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the installweglot function called via the adminactioninstallweglot action. This makes it possible for...

4.3CVSS6.5AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/09 12:00 a.m.13 views

PT-2023-16556 · Unknown +1 · Weglot Translate +1

Name of the Vulnerable Software and Affected Versions: Under Construction plugin for WordPress versions up to and including 3.96 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the install weglot function called via the admin action...

4.3CVSS5.3AI score0.00243EPSS
SaveExploits0References4
NVD
NVD
added 2023/04/07 1:15 p.m.42 views

CVE-2023-25711

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGlobus WPGlobus Translate Options plugin = 2.1.0 versions...

6.1CVSS5.7AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/07 1:15 p.m.9 views

CVE-2023-25711

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGlobus WPGlobus Translate Options plugin = 2.1.0 versions...

6.1CVSS5.8AI score0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/07 12:24 p.m.10 views

CVE-2023-25711 WordPress WPGlobus Translate Options Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGlobus WPGlobus Translate Options plugin = 2.1.0 versions...

5.8CVSS5.8AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/07 12:24 p.m.44 views

CVE-2023-25711 WordPress WPGlobus Translate Options Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGlobus WPGlobus Translate Options plugin = 2.1.0 versions...

5.8CVSS6.1AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/07 12:24 p.m.56 views

CVE-2023-25711

CVE-2023-25711 affects the WordPress WPGlobus Translate Options plugin (

6.1CVSS5.8AI score0.0034EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.17 views

WordPress Plugin WPGlobus Translate Options 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6.8AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/31 4:23 p.m.19 views

GHSA-HFMG-G39C-5444 pimcore is vulnerable to cross-site scripting in translate module

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.20 or apply this patch manually...

5.4CVSS5.2AI score0.0042EPSS
SaveExploits1References6
Rows per page
Query Builder