Lucene search
+L

1022 matches found

CNNVD
CNNVD
added 2024/05/30 12:0 a.m.5 views

WordPress plugin PostX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.5AI score0.01426EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.23 views

WordPress plugin Yumpu ePaper publishing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5CVSS6.5AI score0.00316EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/29 12:0 a.m.6 views

WordPress Plugin WpTravelly 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00389EPSS
SaveExploits0References4
OSV
OSV
added 2024/05/21 9:15 a.m.13 views

CVE-2024-4875

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'ajaxdismiss' function in versions up to, and including, 2.5.2. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00755EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
added 2024/05/21 12:0 a.m.14 views

HT Mega < 2.5.3 - Subscriber+ Options Update

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajaxdismiss' function, allowing authenticated attackers, with subscriber-level permissions and above, to update options such as userscanregister, which can lead to unauthorized user...

4.3CVSS6.5AI score0.00755EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/05/18 12:0 a.m.8 views

WordPress plugin Fluent Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.4AI score0.0123EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.8 views

WordPress plugin WP Compress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.5AI score0.00343EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.20 views

WordPress plugin Swift Framework 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.4AI score0.00377EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2024/05/07 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2024:1452-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.7CVSS6.2AI score0.01361EPSS
SaveExploits0References9
OSV
OSV
added 2024/05/06 7:44 a.m.10 views

SUSE-SU-2024:1499-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup JDK-8315708,bsc1222987 -...

3.7CVSS5.1AI score0.01361EPSS
SaveExploits0References10
OSV
OSV
added 2024/05/06 7:42 a.m.10 views

SUSE-SU-2024:1498-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup JDK-8315708,bsc1222987 -...

3.7CVSS5AI score0.01361EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2024/05/02 4:52 p.m.19 views

CVE-2024-3936 The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.6.1 - Missing Authorization

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtTPGSaveSettings function in all versions up to, and including, 7.6.1. This makes it possible for...

4.3CVSS5.9AI score0.0056EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/05/02 4:52 p.m.14 views

CVE-2024-3233

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcreateindex function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-lev...

4.3CVSS6.4AI score0.00445EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/02 4:51 p.m.54 views

CVE-2024-1584

CVE-2024-1584 affects Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy). The issue is a missing capability check in wpa_check_authentication across all versions up to 5.2.1, enabling unauthorized modification of the site’s Google Analytics tracking ID by unauthenticat...

5.3CVSS6.5AI score0.00435EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/02 4:51 p.m.14 views

CVE-2024-3520 Country State City Dropdown CF7 <= 2.7.1 - Missing Authorization

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tccscapatchsettings function in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with subscriber access...

4.3CVSS5.9AI score0.00445EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.6 views

WordPress plugin Ivory Search 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.2AI score0.00445EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.6 views

WordPress plugin Analytify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.2AI score0.00435EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.7 views

WordPress plugin WP Datepicker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.2AI score0.00911EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.8 views

WordPress plugin Tutor LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.4AI score0.00466EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.9 views

WordPress plugin Post Grid 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.2AI score0.0056EPSS
SaveExploits0References4
Rows per page
Query Builder