| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-20582 | Hig | 0.57 | 8.8 | 0.01 | Oct 11, 2019 | The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery. | ||
| CVE-2019-2215 | Hig | 0.71 | 7.8 | 0.72 | KEV | Oct 11, 2019 | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate… | |
| CVE-2019-2186 | Hig | 0.57 | 8.8 | 0.01 | Oct 11, 2019 | In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2019-2185 | Hig | 0.57 | 8.8 | 0.01 | Oct 11, 2019 | In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product:… | ||
| CVE-2019-2184 | Hig | 0.57 | 8.8 | 0.01 | Oct 11, 2019 | In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product:… | ||
| CVE-2019-2173 | Hig | 0.51 | 7.8 | 0.00 | Oct 11, 2019 | In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for… | ||
| CVE-2019-2114 | Hig | 0.51 | 7.8 | 0.00 | Oct 11, 2019 | In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privilege by installing an application with no additional execution privileges needed.… | ||
| CVE-2015-9492 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. | ||
| CVE-2015-9491 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. | ||
| CVE-2015-9490 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. | ||
| CVE-2015-9489 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. | ||
| CVE-2015-9488 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_us… | ||
| CVE-2015-9487 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. | ||
| CVE-2015-9486 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. | ||
| CVE-2019-6335 | Hig | 0.49 | 7.5 | 0.02 | Oct 11, 2019 | A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to create a denial of service. | ||
| CVE-2019-14570 | Hig | 0.51 | 7.8 | 0.00 | Oct 11, 2019 | Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. | ||
| CVE-2019-14569 | Hig | 0.51 | 7.8 | 0.00 | Oct 11, 2019 | Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. | ||
| CVE-2019-11167 | Hig | 0.51 | 7.8 | 0.00 | Oct 11, 2019 | Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. | ||
| CVE-2019-11120 | Hig | 0.51 | 7.8 | 0.00 | Oct 11, 2019 | Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access. | ||
| CVE-2015-9485 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the… | ||
| CVE-2015-9484 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat… | ||
| CVE-2015-9483 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the… | ||
| CVE-2015-9482 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat… | ||
| CVE-2015-9481 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. | ||
| CVE-2019-17499 | Hig | 0.57 | 8.8 | 0.03 | Oct 11, 2019 | The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter. | ||
| CVE-2010-5335 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (script to basic/minimizer/index.php) is not properly sanitised and can… | ||
| CVE-2010-5334 | Hig | 0.49 | 7.5 | 0.03 | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be… | ||
| CVE-2019-17490 | Hig | 0.57 | 8.8 | 0.01 | Oct 10, 2019 | app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code (with a .php filename but the image/png content type) to the web/polygon/problem/tests URI. | ||
| CVE-2019-17386 | Hig | 0.57 | 8.8 | 0.01 | Oct 10, 2019 | The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php. | ||
| CVE-2019-9534 | Hig | 0.51 | 7.8 | 0.00 | Oct 10, 2019 | The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware… | ||
| CVE-2019-9532 | Hig | 0.51 | 7.8 | 0.00 | Oct 10, 2019 | The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal. | ||
| CVE-2019-15051 | Hig | 0.57 | 8.8 | 0.03 | Oct 10, 2019 | An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter. | ||
| CVE-2019-11528 | Hig | 0.49 | 7.5 | 0.01 | Oct 10, 2019 | An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable. | ||
| CVE-2019-11527 | Hig | 0.57 | 8.8 | 0.03 | Oct 10, 2019 | An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter. | ||
| CVE-2019-5527 | Hig | 0.57 | 8.8 | 0.00 | Oct 10, 2019 | ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5. | ||
| CVE-2015-9480 | Hig | 0.50 | 7.5 | 0.13 | Oct 10, 2019 | The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. | ||
| CVE-2015-9477 | Hig | 0.57 | 8.8 | 0.01 | Oct 10, 2019 | The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates. | ||
| CVE-2015-9476 | Hig | 0.57 | 8.8 | 0.01 | Oct 10, 2019 | The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates. | ||
| CVE-2015-9475 | Hig | 0.57 | 8.8 | 0.01 | Oct 10, 2019 | The Pont theme 1.5 for WordPress has insufficient restrictions on option updates. | ||
| CVE-2015-9474 | Hig | 0.57 | 8.8 | 0.01 | Oct 10, 2019 | The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates. | ||
| CVE-2015-9473 | Hig | 0.49 | 7.5 | 0.04 | Oct 10, 2019 | The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter. | ||
| CVE-2015-9470 | Hig | 0.49 | 7.5 | 0.04 | Oct 10, 2019 | The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter. | ||
| CVE-2015-9465 | Hig | 0.57 | 8.8 | 0.02 | Oct 10, 2019 | The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter. | ||
| CVE-2015-9463 | Hig | 0.49 | 7.5 | 0.04 | Oct 10, 2019 | The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter. | ||
| CVE-2015-9464 | Hig | 0.49 | 7.5 | 0.04 | Oct 10, 2019 | The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter. | ||
| CVE-2015-9462 | Hig | 0.47 | 7.2 | 0.02 | Oct 10, 2019 | The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter. | ||
| CVE-2015-9461 | Hig | 0.47 | 7.2 | 0.02 | Oct 10, 2019 | The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter. | ||
| CVE-2015-9460 | Hig | 0.57 | 8.8 | 0.02 | Oct 10, 2019 | The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter. | ||
| CVE-2015-9458 | Hig | 0.47 | 7.2 | 0.02 | Oct 10, 2019 | The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF. | ||
| CVE-2015-9457 | Hig | 0.47 | 7.2 | 0.02 | Oct 10, 2019 | The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter. |
- risk 0.57cvss 8.8epss 0.01
The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery.
- risk 0.71cvss 7.8epss 0.72
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate…
- risk 0.57cvss 8.8epss 0.01
In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:…
- risk 0.57cvss 8.8epss 0.01
In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product:…
- risk 0.57cvss 8.8epss 0.01
In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product:…
- risk 0.51cvss 7.8epss 0.00
In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
- risk 0.51cvss 7.8epss 0.00
In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privilege by installing an application with no additional execution privileges needed.…
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_us…
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
- risk 0.49cvss 7.5epss 0.02
A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to create a denial of service.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
- risk 0.51cvss 7.8epss 0.00
Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
- risk 0.51cvss 7.8epss 0.00
Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
- risk 0.51cvss 7.8epss 0.00
Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access.
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the…
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat…
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the…
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat…
- risk 0.49cvss 7.5epss 0.03
The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
- risk 0.57cvss 8.8epss 0.03
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter.
- risk 0.49cvss 7.5epss 0.03
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (script to basic/minimizer/index.php) is not properly sanitised and can…
- risk 0.49cvss 7.5epss 0.03
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be…
- risk 0.57cvss 8.8epss 0.01
app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code (with a .php filename but the image/png content type) to the web/polygon/problem/tests URI.
- risk 0.57cvss 8.8epss 0.01
The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.
- risk 0.51cvss 7.8epss 0.00
The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware…
- risk 0.51cvss 7.8epss 0.00
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal.
- risk 0.57cvss 8.8epss 0.03
An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter.
- risk 0.49cvss 7.5epss 0.01
An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.
- risk 0.57cvss 8.8epss 0.03
An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter.
- risk 0.57cvss 8.8epss 0.00
ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.
- risk 0.50cvss 7.5epss 0.13
The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.
- risk 0.57cvss 8.8epss 0.01
The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.
- risk 0.57cvss 8.8epss 0.01
The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.
- risk 0.57cvss 8.8epss 0.01
The Pont theme 1.5 for WordPress has insufficient restrictions on option updates.
- risk 0.57cvss 8.8epss 0.01
The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.
- risk 0.49cvss 7.5epss 0.04
The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter.
- risk 0.49cvss 7.5epss 0.04
The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.
- risk 0.57cvss 8.8epss 0.02
The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.
- risk 0.49cvss 7.5epss 0.04
The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.
- risk 0.49cvss 7.5epss 0.04
The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.
- risk 0.47cvss 7.2epss 0.02
The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.
- risk 0.47cvss 7.2epss 0.02
The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.
- risk 0.57cvss 8.8epss 0.02
The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
- risk 0.47cvss 7.2epss 0.02
The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF.
- risk 0.47cvss 7.2epss 0.02
The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.