Lucene search
+L

177 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2020-6510

Malware in sbrugna...

6.8CVSS6.4AI score0.00339EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-7377

Malware in sbrugna...

6.5CVSS6.6AI score0.00496EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-52671

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00292EPSS
SaveExploits4References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-44015

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00209EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:54 a.m.•21 views

CVE-2024-0856

The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding a booking to the calendar without paying...

8.8CVSS6.8AI score0.00384EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:12 a.m.•15 views

CVE-2024-54792

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...

6.1CVSS6.9AI score0.00292EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•2 views

CVE-2024-12301: Cross-Site Request Forgery (CSRF)

The JSP Store Locator WordPress plugin through 1.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

6.5CVSS5.8AI score0.00217EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/30 6:15 a.m.•29 views

CVE-2024-12709

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

4.3CVSS0.0017EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•1 views

CVE-2024-12709: Cross-Site Request Forgery (CSRF)

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

4.3CVSS5.8AI score0.0017EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•1 views

CVE-2024-10892: Cross-Site Request Forgery (CSRF)

The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

5.4CVSS5.8AI score0.00187EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•2 views

CVE-2024-6136: Cross-Site Request Forgery (CSRF)

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

5.4CVSS5.8AI score0.00231EPSS
SaveExploits1References1
NVD
NVD
•added 2024/08/06 4:15 p.m.•35 views

CVE-2024-6720

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS0.00225EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•2 views

CVE-2024-6720: Cross-Site Request Forgery (CSRF)

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS5.8AI score0.00225EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/31 6:15 a.m.•13 views

CVE-2024-6412

The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

6.5CVSS5.8AI score0.00268EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/31 6:00 a.m.•54 views

CVE-2024-6412 HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF

The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

0.00268EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/31 12:00 a.m.•0 views

CVE-2024-6412: Cross-Site Request Forgery (CSRF)

The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

6.5CVSS5.8AI score0.00268EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/22 6:15 a.m.•11 views

CVE-2024-6244

The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS5.8AI score0.02836EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2024/07/22 6:00 a.m.•24 views

CVE-2024-6244 pz-frontend-manager < 1.0.6 - CSRF change user profile picture

The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

7AI score0.02836EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/22 12:00 a.m.•1 views

CVE-2024-6244: Cross-Site Request Forgery (CSRF)

The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS5.8AI score0.02836EPSS
SaveExploits2References1
OSV
OSV
•added 2024/07/15 6:15 a.m.•14 views

CVE-2024-6075

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS5.8AI score0.00366EPSS
SaveExploits1References1
Rows per page
Query Builder