Threat database

42 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.3%	CVE-2024-37260Foxiz (WordPress theme) · Server-Side Request Forgery (SSRF) High7.2EPSS 0.3%2024-07-06CVE Database V5CVE-2024-37260 Server-Side Request Forgery (SSRF) vulnerability in Theme-Ruby Foxiz.This issue affects Foxiz: from n/a through 2.3.5. EPSS 0.3%Vulnerability Theme-Ruby #cwe-918	CVE Database V5	2024-07-06
Medium	4.3	EPSS 0.2%	CVE-2024-35673Pure Chat (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-06-05CVE Database V5CVE-2024-35673 Cross-Site Request Forgery (CSRF) vulnerability in Pure Chat by Ruby Pure Chat.This issue affects Pure Chat: from n/a through 2.22. EPSS 0.2%Vulnerability Pure Chat by Ruby #cwe-352	CVE Database V5	2024-06-05
Medium	5.3	EPSS 2.1%	CVE-2024-35176ruby rexml · Uncontrolled Resource Consumption Medium5.3EPSS 2.1%2024-05-16CVE Database V5CVE-2024-35176 REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs. EPSS 2.1%Vulnerability ruby #cwe-400 #cwe-770	CVE Database V5	2024-05-16

Page 3 of 3