Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-25005

SEUR Oficial < 1.7.0 - Admin+ Stored Cross-Site Scripting

The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Seur Oficial Project
Products
Seur Oficial
CVE-2021-25004

SEUR Oficial < 1.7.2 - Admin+ Arbitrary File Download

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a password than an administrator can see in the plugin settings page.

CVSS 3.1 · 4.9 Medium EPSS 1.2% KEV · Not listed
Vendors
Seur Oficial Project
Products
Seur Oficial
CVE-2024-9201

SQL injection vulnerability in SEUR plugin

The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/ajax/saveCodFee.php’ endpoint.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Seur Seur Oficial Project
Products
Seur Seur Oficial