Lucene search
+L

1996 matches found

Patchstack
Patchstack
•added 2026/05/12 3:43 p.m.•24 views

WordPress Broadstreet plugin <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation vulnerability

Missing Authorization to Authenticated Subscriber+ Advertiser Creation vulnerability discovered by greenhats - Student in WordPress Plugin Broadstreet Ads versions = 1.53.1...

4.3CVSS5.8AI score0.00158EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/05/12 3:29 p.m.•19 views

WordPress Broadstreet plugin <= 1.53.1 - Authenticated (Subscriber+) Information Disclosure vulnerability

Authenticated Subscriber+ Information Disclosure vulnerability discovered by greenhats - Student in WordPress Plugin Broadstreet Ads versions = 1.53.1...

5.3CVSS5.8AI score0.0027EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/05/12 3:28 p.m.•23 views

WordPress Broadstreet plugin <= 1.53.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by greenhats - Student in WordPress Plugin Broadstreet Ads versions = 1.53.1...

4.4CVSS5.8AI score0.0019EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/05/12 12:32 p.m.•19 views

EUVD-2026-29452

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.2...

5.4CVSS5.8AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/12 11:16 a.m.•20 views

CVE-2026-45210

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.2...

5.4CVSS0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/12 11:02 a.m.•53 views

CVE-2026-45210 WordPress Broadstreet Ads plugin <= 1.52.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.2...

5.4CVSS0.00287EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/12 11:02 a.m.•28 views

CVE-2026-45210

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.2...

5.4CVSS5.8AI score0.00287EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/12 11:02 a.m.•27 views

CVE-2026-45210

Broadstreet Ads WordPress plugin

5.4CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•0 views

CVE-2026-45210: Missing Authorization

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.2...

5.4CVSS5.9AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•18 views

WordPress plugin Broadstreet Ads 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.4CVSS5.8AI score0.00287EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•19 views

WordPress plugin MonsterInsights – Google Analytics Dashboard for WordPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.1CVSS5.8AI score0.00401EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•23 views

PT-2026-40010

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.2...

5.4CVSS5.8AI score0.00287EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•43 views

PT-2026-40465

Name of the Vulnerable Software and Affected Versions MonsterInsights – Google Analytics Dashboard for WordPress versions prior to 10.1.3 Description Missing capability checks in the get ads access token and reset experience functions allow authenticated attackers with Subscriber-level access or...

7.1CVSS5.8AI score0.00401EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/05/06 3:32 p.m.•20 views

EUVD-2026-27826

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.2AI score0.00344EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/06 2:16 p.m.•22 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS0.00344EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/06 12:00 a.m.•40 views

CVE-2026-36358

The Juzaweb CMS v.5.0.0 , a content management system built on the Laravel framework , is vulnerable to a Cross Site Scripting (XSS) flaw in its Add Banner Ads function. This vulnerability allows a remote attacker to execute arbitrary code via a specially crafted script. While exploitation detail...

6.2AI score0.00344EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•0 views

CVE-2026-36358: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.5AI score0.00344EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•17 views

Juzaweb CMS 跨站脚本漏洞

Juzaweb CMS is a content management system developed by Juzaweb’s individual developers, based on the Laravel framework and web platform. Version 5.0.0 of Juzaweb CMS has a cross-site scripting vulnerability. This vulnerability stems from the Add Banner Ads feature, which contains cross-site...

5.4CVSS5.8AI score0.00344EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/06 12:00 a.m.•10 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

6.2AI score0.00344EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/06 12:00 a.m.•41 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

0.00344EPSS
SaveExploits0References2
Rows per page
Query Builder