CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2025-30822 – WordPress Custom Login Logo Plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability
https://notcve.org/view.php?id=CVE-2025-30822
27 Mar 2025 — Cross-Site Request Forgery (CSRF) vulnerability in Hakik Zaman Custom Login Logo allows Cross Site Request Forgery. This issue affects Custom Login Logo: from n/a through 1.1.7. The Custom Login Logo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.7. This is due to missing or incorrect nonce validation on the iwllc_reset_settings() function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick... • https://patchstack.com/database/wordpress/plugin/ideal-wp-login-logo-changer/vulnerability/wordpress-custom-login-logo-plugin-1-1-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 7.5EPSS: 3%CPEs: 2EXPL: 2CVE-2009-2015 – Joomla! Component MooFAQ (com_moofaq) - Local File Inclusion
https://notcve.org/view.php?id=CVE-2009-2015
09 Jun 2009 — Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Vulnerabilidad de salto de directorio en includes/file_includer.php en el componente Ideal MooFAQ (com_moofaq) v1.0 para Joomla! permite a atacantes remotos leer ficheros de su elección mediante un .. • https://www.exploit-db.com/exploits/8898 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0CVE-2006-2317
https://notcve.org/view.php?id=CVE-2006-2317
12 May 2006 — Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject. • http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0203.html •
CVSS: 9.8EPSS: 0%CPEs: 25EXPL: 1CVE-2006-2318
https://notcve.org/view.php?id=CVE-2006-2318
12 May 2006 — Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server. • http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html •
CVSS: 9.8EPSS: 0%CPEs: 16EXPL: 0CVE-2006-2319
https://notcve.org/view.php?id=CVE-2006-2319
12 May 2006 — Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename. • http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html •
CVSS: 9.8EPSS: 0%CPEs: 16EXPL: 0CVE-2006-2320
https://notcve.org/view.php?id=CVE-2006-2320
12 May 2006 — Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2209. • http://secunia.com/advisories/20035 •
CVSS: 6.1EPSS: 0%CPEs: 16EXPL: 0CVE-2006-2321
https://notcve.org/view.php?id=CVE-2006-2321
12 May 2006 — Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207. • http://secunia.com/advisories/20035 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2005-4078
https://notcve.org/view.php?id=CVE-2005-4078
08 Dec 2005 — Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx. • http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html •
CVSS: 6.1EPSS: 0%CPEs: 14EXPL: 0CVE-2004-2207
https://notcve.org/view.php?id=CVE-2004-2207
31 Dec 2004 — Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. • http://www.maxpatrol.com/advdetails.asp?id=14 •
CVSS: 5.0EPSS: 0%CPEs: 14EXPL: 0CVE-2004-2208
https://notcve.org/view.php?id=CVE-2004-2208
31 Dec 2004 — CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors. • http://www.maxpatrol.com/advdetails.asp?id=14 •