Lucene search
K

38 matches found

Vulnrichment
Vulnrichment
added 2024/11/09 12:10 p.m.14 views

CVE-2024-51707 WordPress WP Visual Adverts plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodin WP Visual Adverts wp-visual-adverts allows Reflected XSS.This issue affects WP Visual Adverts: from n/a through = 2.3.0...

7.1CVSS7.2AI score0.00242EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/09 12:10 p.m.18 views

CVE-2024-51707 WordPress WP Visual Adverts plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodin WP Visual Adverts wp-visual-adverts allows Reflected XSS.This issue affects WP Visual Adverts: from n/a through = 2.3.0...

7.1CVSS0.00242EPSS
Exploits0References1
CVE
CVE
added 2024/11/09 12:10 p.m.47 views

CVE-2024-51707

CVE-2024-51707 is a reflected XSS in the WordPress plugin WP Visual Adverts (vulnerable through 2.3.0) due to improper input neutralization during web page generation. Connected sources corroborate the impact type (Reflected XSS) and affected software (WP Visual Adverts). No public details about ...

7.1CVSS7.2AI score0.00242EPSS
Exploits0References1
NVD
NVD
added 2023/11/13 1:15 a.m.12 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS0.00074EPSS
Exploits0References1
OSV
OSV
added 2023/11/13 1:15 a.m.0 views

CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/11/13 1:15 a.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

6.8CVSS7.2AI score0.00074EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/13 12:15 a.m.79 views

CVE-2023-46638

CVE-2023-46638 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WCP OpenWeather (Webcodin) for versions up to 2.5.0 . The CVE entry is supported by multiple connected sources, including NVD and Red Hat advisories, all describing CSRF in this plugin family. The Wordfenc...

8.8CVSS6.4AI score0.00074EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/08/30 4:15 p.m.23 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS6.2AI score0.00088EPSS
Exploits1References1
OSV
OSV
added 2023/08/30 4:15 p.m.0 views

CVE-2023-25471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

6.1CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/08/30 4:15 p.m.16 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

5.8CVSS6AI score0.00088EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/30 3:37 p.m.8 views

CVE-2023-25471 WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

7.1CVSS5.9AI score0.00088EPSS
Exploits1References1
CVE
CVE
added 2023/08/30 3:37 p.m.30 views

CVE-2023-25471

CVE-2023-25471 affects WordPress WCP OpenWeather Plugin (versions

7.1CVSS6AI score0.00088EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/30 12:0 a.m.1 views

PT-2023-20089 · Webcodin · Webcodin Wcp Openweather Plugin

Name of the Vulnerable Software and Affected Versions: Webcodin WCP OpenWeather plugin versions = 2.5.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

7.1CVSS6AI score0.00088EPSS
Exploits1References3
OSV
OSV
added 2023/05/15 11:15 a.m.2 views

CVE-2023-22703

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

6.1CVSS6.8AI score
Exploits0References1
NVD
NVD
added 2023/05/15 11:15 a.m.13 views

CVE-2023-22703

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

7.1CVSS6.2AI score0.00199EPSS
Exploits0References1
Prion
Prion
added 2023/05/15 11:15 a.m.14 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

5.8CVSS6AI score0.00199EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/05/15 10:28 a.m.47 views

CVE-2023-22703

CVE-2023-22703 concerns the WordPress plugin WCP Contact Form by Webcodin, with a Reflected Cross-Site Scripting (XSS) vulnerability in versions ≤ 3.1.0. The root cause is insufficient sanitisation of the tab parameter, causing unauthenticated, network-exposed but user-initiated (UI: REQUIRED) XS...

7.1CVSS6.1AI score0.00199EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/15 10:28 a.m.20 views

CVE-2023-22703 WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

7.1CVSS6.3AI score0.00199EPSS
Exploits0References1
Rows per page
Query Builder