Lucene search
K

6 matches found

NVD
NVD
added 2024/10/23 4:15 p.m.11 views

CVE-2024-49668

Unrestricted Upload of File with Dangerous Type vulnerability in christopherdewese1099 Verbalize WP verbalize-wp allows Upload a Web Shell to a Web Server.This issue affects Verbalize WP: from n/a through = 1.0...

10CVSS0.58955EPSS
Exploits0References1
CVE
CVE
added 2024/10/23 3:36 p.m.46 views

CVE-2024-49668

CVE-2024-49668 – Verbalize WP (WordPress plugin) Arbitrary File Upload . Affected: Verbalize WP up to version 1.0. Description: Unrestricted Upload of File with Dangerous Type could allow a Web Shell upload to the server. Sources/verification: Wordfence Intelligence vulnerability entry notes Unpa...

10CVSS5.9AI score0.58955EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 3:36 p.m.13 views

CVE-2024-49668 WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in christopherdewese1099 Verbalize WP verbalize-wp allows Upload a Web Shell to a Web Server.This issue affects Verbalize WP: from n/a through = 1.0...

10CVSS5.9AI score0.58955EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/10/21 8:45 a.m.3 views

WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Verbalize WP versions = 1.0...

10CVSS7AI score0.58955EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/10/21 12:0 a.m.12 views

WordPress Verbalize WP Plugin <= 1.0 is vulnerable to Arbitrary File Upload

Software Verbalize WP Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49668 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 5d5cf04a7cde Credits stealthcopter Required privilege Unauthenticate...

10CVSS6.8AI score0.58955EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.8 views

WordPress Verbalize WP Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Verbalize WP Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 21e3ff2fe6c4 Credits Rafie Muhammad Patchstack Required...

6.8AI score
Exploits0References2Affected Software1
Rows per page
Query Builder