Lucene search
K

9 matches found

Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.3 views

PT-2024-36474 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimple CMS CE version 3.3.19 Description: The issue allows for Server-Side Request Forgery SSRF in the plug-in download address on the management page of the backend management system. This can be achieved within the GetSimple CMS CE...

7.2CVSS7AI score0.00097EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.1 views

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.3.19, which originates from the download address of a plugin in the backend management system, and can enable server-side request forgery attacks...

7.2CVSS6.7AI score0.00097EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.2 views

PT-2024-36475 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimple CMS CE version 3.3.19 Description: The issue is related to Server-Side Request Forgery SSRF in the backend plugin module. This allows an attacker to forge requests from the server, potentially leading to unauthorized access or...

8.8CVSS7AI score0.00216EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.1 views

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.3.19, which stems from a vulnerability in the back-end plugin module to a server-side request forgery attack...

8.8CVSS6.6AI score0.00216EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/16 12:0 a.m.1 views

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.3.19, which stems from the presence of an arbitrary code execution vulnerability that can be exploited by an attacker to implement code that can be executed...

9.8CVSS7.6AI score0.00636EPSS
Exploits0References1
OSV
OSV
added 2023/05/24 12:15 a.m.0 views

CVE-2023-2496

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validateupload' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a...

7.5CVSS6.5AI score
Exploits0References2
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.2 views

WordPress plugin Go Pricing - WordPress Responsive Pricing Tables 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Go Pricing - WordPres...

8.8CVSS8.4AI score0.00471EPSS
Exploits0References4
Patchstack
Patchstack
added 2023/05/23 12:0 a.m.14 views

WordPress MPG Plugin <= 3.3.19 is vulnerable to SQL Injection

Software MPG Type Plugin Vulnerable versions = 3.3.19 Fixed in 3.3.20 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-33927 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID ad0baec3bee8 Credits LEE SE HYOUNG hackintoanetwork Required privilege...

9.8CVSS6.8AI score0.00319EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.2 views

WordPress plugin Go Pricing - WordPress Responsive Pricing Tables 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Go Pricing - WordPres...

7.5CVSS8.6AI score0.04416EPSS
Exploits0References4
Rows per page
Query Builder