Lucene search
+L

3164 matches found

CNNVD
CNNVD
added 2023/05/31 12:00 a.m.11 views

WordPress Plugin BestWebSoft Twitter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS4.7AI score0.00586EPSS
SaveExploits0References4
CVE
CVE
added 2023/05/30 11:31 p.m.78 views

CVE-2012-10015

CVE-2012-10015 affects the BestWebSoft Twitter Plugin for WordPress (versions up to 2.14). Affected is the function twttr_settings_page in twitter.php of the Settings Page component, where a cross-site request forgery (CSRF) vulnerability exists. The issue can be triggered remotely; upgrading to ...

8.8CVSS6.5AI score0.00433EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/30 11:31 p.m.33 views

CVE-2012-10015 BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttrsettingspage of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch...

5CVSS8.8AI score0.00433EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/30 12:00 a.m.16 views

PT-2023-9952 · Bestwebsoft · Bestwebsoft Twitter Plugin

Name of the Vulnerable Software and Affected Versions: BestWebSoft Twitter Plugin versions up to 2.14 Description: A problematic issue has been found, affecting the twttr settings page function of the twitter.php file in the Settings Page component. This issue leads to cross-site request forgery...

8.8CVSS7.1AI score0.00433EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/30 12:00 a.m.11 views

WordPress Plugin BestWebSoft Twitter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS5.8AI score0.00433EPSS
SaveExploits0References5
OSV
OSV
added 2023/05/29 1:15 a.m.8 views

CVE-2022-33974

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

8.8CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/29 1:15 a.m.32 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

6.8CVSS8.7AI score0.00248EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/29 12:10 a.m.9 views

CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

5.4CVSS7.1AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/29 12:10 a.m.66 views

CVE-2022-33974

The CVE-2022-33974 entry concerns the WordPress plugin Smash Balloon Custom Twitter Feeds (Tweets Widget) with versions

8.8CVSS7AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/29 12:10 a.m.45 views

CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

5.4CVSS9.1AI score0.00248EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/29 12:00 a.m.12 views

WordPress Plugin Custom Twitter Feeds 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS8.3AI score0.00248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/29 12:00 a.m.13 views

PT-2023-13331 · WordPress · Smash Balloon Custom Twitter Feeds

Name of the Vulnerable Software and Affected Versions: Smash Balloon Custom Twitter Feeds Tweets Widget plugin versions = 1.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.8AI score0.00248EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2023/05/25 1:47 p.m.37 views

Cynet Protects Hospital From Lethal Infection

A hospital with 2,000 employees in the E.U. deployed Cynet protections across its environment. The hospital was in the process of upgrading several expensive imaging systems that were still supported by Windows XP and Windows 7 machines. Cynet protections were in place on most of the Windows XP a...

7.4AI score
SaveExploits0
Patchstack
Patchstack
added 2023/05/25 12:00 a.m.19 views

WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Custom Twitter Feeds Tweets Widget Type Plugin Vulnerable versions = 1.8.4 Fixed in 2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-33974 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ffeee86a1e55 Credits...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References2Affected Software1
Malwarebytes
Malwarebytes
added 2023/05/23 10:00 p.m.16 views

AI generated Pentagon explosion photograph goes viral on Twitter

Twitters recent changes to checkmark verification continue to cause chaos, this time in the realm of potentially dangerous misinformation. A checkmarked account claimed to show images of explosions close to important landmarks like the Pentagon. These images quickly went viral despite being AI...

7.1AI score
SaveExploits0
OSV
OSV
added 2023/05/23 1:15 p.m.8 views

CVE-2023-23706

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/23 1:15 p.m.30 views

CVE-2023-23706

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/23 1:15 p.m.29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/23 12:41 p.m.45 views

CVE-2023-23706 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/23 12:41 p.m.104 views

CVE-2023-23706

CVE-2023-23706 affects the WordPress plugin MiniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) , specifically versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder