Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-35964

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00024EPSS
Exploits1References3
NVD
NVD
added 2025/08/27 6:15 p.m.1 views

CVE-2025-58202

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

4.3CVSS0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/27 5:45 p.m.8 views

CVE-2025-58202 WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

4.3CVSS0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/27 5:45 p.m.1 views

CVE-2025-58202 WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.1 views

WordPress plugin Simple Page Access Restriction 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.3AI score0.00026EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.2 views

PT-2025-34916 · WordPress · Simple Page Access Restriction

Name of the Vulnerable Software and Affected Versions: Simple Page Access Restriction versions through 1.0.32 Description: The Simple Page Access Restriction plugin is susceptible to a Cross-Site Request Forgery CSRF issue. This allows an attacker to potentially perform actions on behalf of an...

4.3CVSS6.5AI score0.00026EPSS
Exploits0References5
NVD
NVD
added 2025/03/27 2:15 p.m.4 views

CVE-2025-26732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in burgersoftware StoreBiz storebiz allows DOM-Based XSS.This issue affects StoreBiz: from n/a through = 1.0.32...

6.5CVSS0.00291EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/24 6:21 p.m.2 views

WordPress StoreBiz plugin <= 1.0.32 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme StoreBiz versions = 1.0.32...

6.5CVSS6.1AI score0.00291EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.1 views

WordPress plugin Checkout for PayPal 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00249EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/17 12:0 a.m.3 views

PT-2025-2154 · WordPress · Checkout For Paypal

Name of the Vulnerable Software and Affected Versions: Checkout for PayPal plugin for WordPress versions up to, and including, 1.0.32 Description: The issue is related to Stored Cross-Site Scripting via the plugin's checkout for paypal shortcode due to insufficient input sanitization and output...

6.4CVSS7.9AI score0.00249EPSS
Exploits0References7
Patchstack
Patchstack
added 2025/01/16 7:13 p.m.3 views

WordPress Checkout for PayPal plugin <= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Checkout for PayPal versions = 1.0.32...

6.4CVSS5.7AI score0.00249EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/07 12:0 a.m.2 views

PT-2024-23922 · Pickplugins · Product Designer

Name of the Vulnerable Software and Affected Versions: PickPlugins Product Designer versions 1.0.32 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security issues when untrusted data is processed by the Product Designer softwar...

8.7CVSS9.6AI score0.00403EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.2 views

WebAssembly 安全漏洞

WebAssembly is a binary instruction format for stack-based virtual machines from WebAssembly. A security vulnerability exists in WebAssembly wat2wasm version v1.0.32-35-g9990b0cf, which originated from a vulnerability that allows an attacker to cause libc++abi.dylib to crash by placing an @ befor...

5.5CVSS5.7AI score0.00024EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.1 views

WABT 安全漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability in WABT wasm2c version 1.0.32, wasm2wat version 1.0.32, wasm-decompile version 1.0.32, and wasm-validate version 1.0.32 exists that originates from a vulnerability that could allow an attacker to cause a...

7.5CVSS7.5AI score0.0031EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.2 views

PT-2023-23411 · Wasm2Wat +3 · Wasm2Wat +4

Name of the Vulnerable Software and Affected Versions: wasm2c version 1.0.32 wasm2wat version 1.0.32 wasm-decompile version 1.0.32 wasm-validate version 1.0.32 Description: An issue in the mentioned software allows attackers to cause a Denial of Service DoS via running a crafted binary. This can ...

7.5CVSS9.5AI score0.0031EPSS
Exploits1References12
CNNVD
CNNVD
added 2023/04/14 12:0 a.m.1 views

WHO 安全漏洞

WHO is an online video community application. A security vulnerability exists in WHO versions 1.0.28, 1.0.30, and 1.0.32, which originates from a vulnerability that could allow an attacker to elevate privileges via the TTMultiProvider component...

9.8CVSS8.4AI score0.00428EPSS
Exploits1References4
OSV
OSV
added 2021/08/16 7:15 p.m.0 views

CVE-2021-34659

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the /license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32...

6.1CVSS6.4AI score0.0021EPSS
Exploits1References2
Prion
Prion
added 2021/08/16 7:15 p.m.8 views

Cross site scripting

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the /license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32...

4.3CVSS6.1AI score0.0021EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/10/27 12:0 a.m.41 views

GLSA-201110-25 : Pure-FTPd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-25 Pure-FTPd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pure-FTPd. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to...

5.8CVSS5.6AI score0.22184EPSS
Exploits5References3
Gentoo Linux
Gentoo Linux
added 2011/10/26 12:0 a.m.43 views

Pure-FTPd: Multiple vulnerabilities

Background Pure-FTPd is a fast, production-quality and standards-compliant FTP server. Description Multiple vulnerabilities have been discovered in Pure-FTPd. Please review the CVE identifiers referenced below for details. Impact Remote unauthenticated attackers may be able to inject FTP commands...

5.8CVSS2.9AI score0.22184EPSS
Exploits5
Rows per page
Query Builder