HOMEVULNERABILITIESVENDORSZemanta

ZemantaCVEs & Vulnerabilities

5 CVEs affecting Zemanta products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

5 CVEs→ All vendors

Most Affected Products

related posts 41search everything 6
CVE-2013-3476MEDIUM

Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors.

2 Jun 2014
6.8
CVSS
CVE-2013-3257MEDIUM

Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.

2 Jun 2014
6.8
CVSS
CVE-2013-3477MEDIUM

Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.

27 May 2014
6.8
CVSS
CVE-2014-3843MEDIUM

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

22 May 2014
6.8
CVSS
CVE-2014-2316HIGH

SQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php. NOTE: some of these details are obtained from third party information.

9 Mar 2014
7.5
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database