VendorsPliggpligg_cms2.0.2
Vulnerabilities

Pligg CMS 2.0.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

20CVEs
CVE-2023-37677
Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.php.
Published 2023-07-25 · Modified
9.8EPSS 0.013
CVE-2022-34955
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers.php.
Published 2022-08-02 · Modified
9.8EPSS 0.009
CVE-2022-34956
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.
Published 2022-08-02 · Modified
9.8EPSS 0.009
CVE-2024-42621
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42617
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42616
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics
Published 2024-08-20 · Modified
8.8EPSS 0.003
CVE-2024-42613
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42611
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42610
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42608
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.
Published 2024-08-20 · Modified
8.8EPSS 0.003
CVE-2024-42607
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42604
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3
Published 2024-08-20 · Modified
8.8EPSS 0.003
CVE-2024-42612
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42619
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?id=0&list=whitelist&remove=pligg.com
Published 2024-08-20 · Analyzed
8.8EPSS 0.003
CVE-2024-42609
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars
Published 2024-08-20 · Analyzed
8.8EPSS 0.002
CVE-2024-42605
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1
Published 2024-08-20 · Analyzed
8.8EPSS 0.002
CVE-2024-42606
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1
Published 2024-08-20 · Analyzed
8.8EPSS 0.002
CVE-2024-42603
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall
Published 2024-08-20 · Analyzed
8.8EPSS 0.002
CVE-2015-6655
Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/admin_users.php.
Published 2015-08-31 · Modified
6.81 PoCEPSS 0.020