7947 matches found
CVE-2026-15383
The CVE-2026-15383 issue affects the Blog Floating Button WordPress plugin up to version 1.4.20. It does not sanitize or escape the visitor User-Agent header, storing it via an unauthenticated tracking REST endpoint and later rendering it unescaped in an administrator report page. This enables an...
EUVD-2026-52174
The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...
Joomla! Component MMS Blog 2.3.0 - Local File Inclusion
A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1491 info: name: Joomla! Component MMS Blo...
PrestaShop Theme Volty CMS Blog - SQL Injection
In the module 'Theme Volty CMS Blog' tvcmsblog up to versions 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-39650 info: name: PrestaShop Theme Volty CMS Blog - SQL Injection author: mastercho severity: critical description: | In the...
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion
The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...
Jms Blog - SQL Injection
The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...
CVE-2025-65337
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2025-65337
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2025-65337
CVE-2025-65337 affects Sourcecodester’s Fantastic Blog CMS 1.0 . The vulnerability is a Cross Site Scripting (XSS) flaw in the file pageEditMember.php triggered via the address field. The documented impact is user-facing XSS; no exploitation details or confirmed mitigations are provided in the su...
EUVD-2025-210531
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2025-65337
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
CVE-2019-10650
creationtimestamp| type| source ---|---|--- 2026-07-27 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrnk37cind26...
CVE-2019-13045
creationtimestamp| type| source ---|---|--- 2026-07-25 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrgq5hdgvk2i...
CVE-2020-10209
creationtimestamp| type| source ---|---|--- 2026-07-25 00:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrgl4jvkcl26 2026-07-25 00:07:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mrgl4l64df2c...
CVE-2021-25148
creationtimestamp| type| source ---|---|--- 2026-07-24 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrghraizdq2l...
CVE-2024-45116
creationtimestamp| type| source ---|---|--- 2026-07-24 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrg2e3mwk32s...
CVE-2024-21214
creationtimestamp| type| source ---|---|--- 2026-07-24 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrfyohgust2y...
CVE-2024-21252
creationtimestamp| type| source ---|---|--- 2026-07-24 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrfwys3igb22...