Lucene search
+L

317916 matches found

Patchstack
Patchstack
•added 2026/10/06 4:18 p.m.•16 views

NPM: Payload vulnerable to API key disclosure through ordinary document reads

NPM: Payload vulnerable to API key disclosure through ordinary document reads vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

7.7CVSS5.8AI score0.003EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 4:17 p.m.•18 views

NPM: Payload relationship-query authorization bypass

NPM: Payload relationship-query authorization bypass vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

6.9CVSS5.8AI score0.00268EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 4:17 p.m.•19 views

NPM: Payload: Token refresh and password reset responses may expose restricted user fields

NPM: Payload: Token refresh and password reset responses may expose restricted user fields vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

7.1CVSS5.8AI score0.00257EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 4:17 p.m.•15 views

NPM: Payload: Field access control bypass on auth collections

NPM: Payload: Field access control bypass on auth collections vulnerability discovered by ? in WordPress Npm payload versions 3.0.0, 3.90.0...

9.3CVSS5.8AI score0.00249EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 4:09 p.m.•16 views

NPM: Payload: SQL Injection in SQLite and Postgres

NPM: Payload: SQL Injection in SQLite and Postgres vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.88.0...

9.8CVSS5.8AI score0.00381EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 4:09 p.m.•16 views

NPM: Payload: Untrusted redirect URL parameter exploit

NPM: Payload: Untrusted redirect URL parameter exploit vulnerability discovered by ? in WordPress Npm payload versions = 3.40.0, 3.88.0...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 4:09 p.m.•17 views

NPM: Payload: Polymorphic join queries could disclose hidden fields

NPM: Payload: Polymorphic join queries could disclose hidden fields vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

7.1CVSS5.8AI score0.00244EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 3:38 p.m.•17 views

NPM: Payload: Password hashes use insufficient PBKDF2 iterations

NPM: Payload: Password hashes use insufficient PBKDF2 iterations vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

5.6CVSS5.8AI score0.0008EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 3:38 p.m.•19 views

NPM: Payload: Sort queries could expose protected field information

NPM: Payload: Sort queries could expose protected field information vulnerability discovered by ? in WordPress Npm payload versions 3.88.0...

6.9CVSS5.8AI score0.00276EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/10/06 1:40 p.m.•16 views

NPM: pbkdf2 rehashes long passwords on every iteration, enabling denial of service

NPM: pbkdf2 rehashes long passwords on every iteration, enabling denial of service vulnerability discovered by ? in WordPress Npm pbkdf2 versions = 3.1.6...

6.3CVSS5.4AI score0.00284EPSS
SaveExploits0References5Affected Software1
GithubExploit
GithubExploit
•added 2026/10/06 1:21 p.m.•30 views

Exploit for CVE-2026-97286

CVE-2026-97286: Authenticated Stored XSS in Strong Testimonial...

6.5CVSS5.8AI score0.00154EPSS
SaveExploits1
Patchstack
Patchstack
•added 2026/10/06 11:40 a.m.•22 views

WordPress elegro Crypto Payment plugin <= 1.0.1 - Unauthenticated Arbitrary Order Status Change vulnerability

Unauthenticated Arbitrary Order Status Change vulnerability discovered by JunHee CHO in WordPress Plugin elegro Crypto Payment versions = 1.0.1...

6.5CVSS5.8AI score0.00164EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/10/06 11:26 a.m.•9 views

WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Akbarov Rauf in WordPress Plugin aBlocks versions = 2.16.0...

7.1CVSS5.7AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/06 10:46 a.m.•11 views

WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Supakiad S. m3ez in WordPress Plugin FV Flowplayer Video Player versions = 7.5.54.7212...

6.5CVSS5.7AI score0.0013EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/06 10:44 a.m.•12 views

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteVault – Backup, Restore, Migration & Cloning versions = 1.5.19...

5.8AI score0.00387EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/06 10:12 a.m.•12 views

WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by William Honnér in WordPress Plugin Social Share Icons & Social Share Buttons versions = 3.7.5...

5.7AI score0.0018EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/06 10:09 a.m.•10 views

WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Music versions = 2.1.8.2...

5.7AI score0.0018EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/06 10:02 a.m.•8 views

WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by neurotx in WordPress Plugin Events Manager versions = 7.4.6...

5.8AI score0.00342EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/06 10:00 a.m.•11 views

WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FV Player 8 versions = 8.1.8...

5.7AI score0.0018EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/06 9:56 a.m.•9 views

WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Tutor LMS versions = 4.1.0...

5.7AI score0.0018EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder