Lucene search
K

7 matches found

Patchstack
Patchstack
added 2026/02/02 9:17 a.m.3 views

WordPress WP To Do plugin <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments vulnerability

Authenticated Admin+ Stored Cross-Site Scripting via Task Comments vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin WP To Do versions = 1.3.0...

4.8CVSS5.3AI score0.00216EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.2 views

The vulnerability of the wptodo_addcomment function in the WordPress To Do plugin, a content management system for websites, allows a hacker to perform a CSRF attack.

The vulnerability of the wptodoaddcomment function in the WordPress To Do plugin, a content management system for websites, is related to the of cross-site requests due to incorrect validation of the value of the nonce cookie. Exploiting this vulnerability could allow an attacker to execute a CSR...

5CVSS5.4AI score0.00197EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/07/06 1:15 p.m.4 views

CVE-2024-37539

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.3.0...

5.4CVSS5.8AI score0.00143EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/07/06 12:10 p.m.2 views

WordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin WP To Do versions = 1.3.0...

6.5CVSS6.1AI score0.00143EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2024/07/06 12:0 a.m.4 views

WordPress plugin WP To Do security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.8AI score0.00143EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.3 views

WordPress plugin WP To Do 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS6.7AI score0.00197EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/31 12:0 a.m.2 views

WordPress plugin WP To Do cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00065EPSS
Exploits0References2
Rows per page
Query Builder