Lucene search
+L

8 matches found

WPVulnDB
WPVulnDB
•added 2023/11/23 12:00 a.m.•27 views

WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery

Description The WCP OpenWeather plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown...

8.8CVSS6.8AI score0.00261EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/13 12:00 a.m.•6 views

CVE-2023-46638: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS7.9AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/13 12:00 a.m.•6 views

PT-2023-30130

Name of the Vulnerable Software and Affected Versions Webcodin WCP OpenWeather plugin versions = 2.5.0 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS5.9AI score0.00261EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/10/25 12:00 a.m.•24 views

WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WCP OpenWeather Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46638 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 63c5a56a4d0f Credits Mika Required privile...

8.8CVSS6.6AI score0.00261EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/30 3:37 p.m.•17 views

CVE-2023-25471 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS5.9AI score0.00486EPSS
SaveExploits1References1
CVE
CVE
•added 2023/08/30 3:37 p.m.•62 views

CVE-2023-25471

CVE-2023-25471 affects WordPress WCP OpenWeather Plugin (versions

7.1CVSS6AI score0.00486EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•7 views

CVE-2023-25471: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS6.4AI score0.00486EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2023/06/28 12:00 a.m.•33 views

WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Software WCP OpenWeather Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25471 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 90acb7d8d993 Credits Nguyen Xuan Chien...

7.1CVSS5.7AI score0.00486EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder