Lucene search
+L

216 matches found

vulnersOsv
vulnersOsv
added 2026/04/22 8:23 p.m.4 views

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2026-41673 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2026-41673 Source advisory: OSV:GHSA-2V35-W6HQ-6MFW...

8.7CVSS5.3AI score0.00643EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/03/21 3:26 a.m.39 views

CVE-2026-2427 itsukaita <= 0.1.2 - Reflected Cross-Site Scripting via 'day_from' Parameter

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00256EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/21 3:26 a.m.14 views

CVE-2026-2427

The CVE-2026-2427 issue concerns the itsukaita WordPress plugin. Affected: itsukaita plugin for WordPress. Vulnerability: Reflected Cross-Site Scripting via the day_from and day_to parameters in all versions up to and including 0.1.2, caused by insufficient input sanitization and output escaping....

6.1CVSS6AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/21 12:00 a.m.11 views

PT-2026-26836

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'day from' and 'day to' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6AI score0.00256EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.15 views

WordPress plugin itsukaita 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.7AI score0.00256EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.7 views

Fedora 43 : complyctl (2026-aa8453cfd0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aa8453cfd0 advisory. Update to Upstream version 0.1.2 - https://github.com/complytime/complyctl/releases/tag/v0.1.2 Tenable has extracted the preceding description block...

7.5CVSS6.9AI score0.00623EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2026/01/09 11:00 a.m.9 views

WordPress Better Business Reviews plugin <= 0.1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Better Business Reviews versions = 0.1.1...

5.4CVSS6.8AI score0.00162EPSS
SaveExploits0Affected Software1
Snyk
Snyk
added 2026/01/01 6:44 a.m.4 views

Insufficiently Protected Credentials

Overview rdsai-cli is an AI-powered CLI tool for Relation database management and analysis Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to insecure local storage of sensitive credentials. An attacker can exploit this by accessing the configuration...

6.8CVSS6.4AI score
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.13 views

WordPress Ketchup Shortcodes plugin <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Ketchup Shortcodes versions = 0.1.2...

6.4CVSS5.4AI score0.00245EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/28 2:38 a.m.7 views

CVE-2025-62919

Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Demo Importer: from n/a through = 0.1.3...

5.4CVSS5.9AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/27 2:15 a.m.9 views

CVE-2025-62919

Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Demo Importer: from n/a through = 0.1.3...

5.4CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:33 a.m.17 views

CVE-2025-62919

CVE-2025-62919 corresponds to a Missing Authorization vulnerability in the WordPress plugin TS Demo Importer (versions

5.4CVSS5.9AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:33 a.m.16 views

CVE-2025-62919 WordPress TS Demo Importer plugin <= 0.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Demo Importer: from n/a through = 0.1.3...

5.4CVSS0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:33 a.m.4 views

CVE-2025-62919 WordPress TS Demo Importer plugin <= 0.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Demo Importer: from n/a through = 0.1.3...

5.4CVSS5.1AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.10 views

PT-2025-43796

Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Demo Importer: from n/a through = 0.1.2...

9.1CVSS7AI score0.0026EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-4072

Malware in sbrugna...

4.3CVSS6.4AI score0.04376EPSS
SaveExploits5References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2006-6266

Malware in sbrugna...

4.3CVSS6.1AI score0.01262EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2025/10/04 6:40 a.m.9 views

WordPress TS Demo Importer plugin <= 0.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin TS Demo Importer versions = 0.1.3...

9.1CVSS5.3AI score0.0026EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-2659

Malicious code in bioql PyPI...

8.2CVSS8AI score0.00415EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-29049

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00884EPSS
SaveExploits1References4
Rows per page
Query Builder