Lucene search
+L

122 matches found

Vulnrichment
Vulnrichment
added 2025/09/22 6:24 p.m.2 views

CVE-2025-57941 WordPress Append Link on Copy Plugin <= 0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JonathanMH Append Link on Copy allows Stored XSS. This issue affects Append Link on Copy: from n/a through 0.2...

5.9CVSS5.6AI score0.00276EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.11 views

CVE-2025-58200

CVE-2025-58200 : CSRF vulnerability in the Flexible FAQ (WordPress plugin). Documented as affecting Flexible FAQ up to version 0.2; no public exploit details in the provided sources. The connected docs confirm a CSRF issue in this plugin, but remediation/version specifics beyond 0.2 are not provi...

4.3CVSS5.9AI score0.00131EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.4 views

PT-2025-38884

Name of the Vulnerable Software and Affected Versions Bage Flexible FAQ versions through 0.2 Description A Cross-Site Request Forgery CSRF issue exists in Bage Flexible FAQ. This allows for the execution of unwanted actions on behalf of an authenticated user. Recommendations At the moment, there ...

4.3CVSS6.5AI score0.00131EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/11 12:0 a.m.6 views

WordPress plugin Plugin updates blocker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.3AI score0.00124EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/31 4:33 a.m.7 views

CVE-2025-9374

The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to import tags granted they can...

4.3CVSS5.4AI score0.00133EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/08/28 9:51 p.m.6 views

WordPress Ultimate Tag Warrior Importer plugin <= 0.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Ultimate Tag Warrior Importer versions = 0.2...

4.3CVSS6.7AI score0.00133EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-11654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remo...

5.9CVSS6.3AI score0.02014EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2021-33896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators. CVE-2021-33896 Note that...

5.3CVSS5.6AI score0.01766EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2013-7401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parserequest function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service crash via a URI without a or ? character in an ICAP...

5CVSS6AI score0.02817EPSS
SaveExploits1References2
NVD
NVD
added 2025/08/14 7:15 p.m.7 views

CVE-2025-53219

Cross-Site Request Forgery CSRF vulnerability in pl4g4 WP-Database-Optimizer-Tools wp-database-optimizer-tools allows Cross Site Request Forgery.This issue affects WP-Database-Optimizer-Tools: from n/a through = 0.2...

5.4CVSS0.00136EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.6 views

WordPress plugin WP-Database-Optimizer-Tools 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.7AI score0.00136EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/12 2:24 a.m.28 views

CVE-2025-8688

CVE-2025-8688 : The WordPress plugin Inline Stock Quotes (versions

6.4CVSS5.9AI score0.00249EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.8 views

PT-2025-32621 · WordPress · Inline Stock Quotes

Name of the Vulnerable Software and Affected Versions: Inline Stock Quotes plugin for WordPress versions up to and including 0.2 Description: The Inline Stock Quotes plugin for WordPress is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on...

6.4CVSS6.2AI score0.00249EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/07/02 2:3 a.m.8 views

CVE-2025-53074

Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2...

9.1CVSS7.3AI score0.00334EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/02 12:0 a.m.7 views

Nokia Single RAN 安全漏洞

Nokia Single RAN is a wireless network technology from Nokia, Finland. A security vulnerability exists in Nokia Single RAN 24R1-SR prior to version 0.2 MP, which stems from improper privilege management and could result in elevated privileges...

6.4CVSS6.8AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/30 2:15 a.m.3 views

UBUNTU-CVE-2025-0634

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2...

9.8CVSS5.9AI score0.00448EPSS
SaveExploits0References5
CVE
CVE
added 2025/06/30 1:44 a.m.35 views

CVE-2025-0634

CVE-2025-0634 Reports a Use After Free in Samsung Open Source rlottie (V0.2) that enables Remote Code Inclusion. Affected component: rlottie library used by Samsung, with NVD listing a 3.1 base score of 9.8 (CRITICAL) and impact to Confidentiality, Integrity, Availability. The TencentOSS/Tenables...

9.8CVSS7.7AI score0.00448EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2025/06/30 1:44 a.m.9 views

CVE-2025-0634

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2...

9.8CVSS5.4AI score0.00448EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/06/14 12:0 a.m.6 views

WordPress plugin kk Youtube Video 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6.1AI score0.00186EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 8:5 a.m.8 views

CVE-2024-51573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ersatzpole ML Responsive Audio player with playlist Shortcode mlr-audio allows Stored XSS.This issue affects ML Responsive Audio player with playlist Shortcode: from n/a through = 0.2...

6.5CVSS5.9AI score0.00253EPSS
SaveExploits0References1
Rows per page
Query Builder