Lucene search
K

18 matches found

Vulnrichment
Vulnrichment
added 2025/03/27 2:1 p.m.3 views

CVE-2025-26731 WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Stored XSS.This issue affects ARPrice: from n/a through = 4.1.3...

6.5CVSS8.6AI score0.00277EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 2:1 p.m.9 views

CVE-2025-26731 WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Stored XSS.This issue affects ARPrice: from n/a through = 4.1.3...

6.5CVSS0.00277EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.2 views

WordPress plugin ARPrice 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS7.9AI score0.00277EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/03/24 2:0 p.m.2 views

WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Anhchangmutrang Patchstack Alliance in WordPress Plugin ARPrice versions = 4.1.3...

6.5CVSS6.1AI score0.00277EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/01/21 1:40 p.m.16 views

CVE-2024-49688 WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through = 4.1.3...

9.8CVSS0.00474EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 1:40 p.m.3 views

CVE-2024-49700 WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Reflected XSS.This issue affects ARPrice: from n/a through = 4.1.3...

7.1CVSS7.2AI score0.00074EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/21 1:40 p.m.18 views

CVE-2024-49699 WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through = 4.1.3...

8.8CVSS0.04594EPSS
Exploits3References1
Vulnrichment
Vulnrichment
added 2025/01/21 1:40 p.m.8 views

CVE-2024-49699 WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through = 4.1.3...

8.8CVSS7.2AI score0.04594EPSS
Exploits3References1
CVE
CVE
added 2025/01/21 1:40 p.m.43 views

CVE-2024-49700

CVE-2024-49700 corresponds to a Reflected Cross-Site Scripting vulnerability in the ARPrice WordPress plugin (Pricing Table Plugin). Reports state the issue affects ARPrice versions n/a through 4.0.3 and stems from improper input neutralization during web page generation. The CVSS/metrics (CVSS 3...

7.1CVSS7.2AI score0.00074EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/21 1:40 p.m.13 views

CVE-2024-49700 WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Reflected XSS.This issue affects ARPrice: from n/a through = 4.1.3...

7.1CVSS0.00074EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/21 1:40 p.m.13 views

CVE-2024-49666 WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems ARPrice arprice allows SQL Injection.This issue affects ARPrice: from n/a through = 4.1.3...

8.5CVSS0.00224EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 1:40 p.m.39 views

CVE-2024-49666

CVE-2024-49666 affects the WordPress ARPrice plugin (versions n/a–4.0.3). Root cause is improper neutralization of SQL in the plugin, enabling SQL injection. CVSS v3.1 base score 8.5 (Network access, Low privileges, High confidentiality impact, Low availability impact). Patch guidance from PT-202...

8.5CVSS7.3AI score0.00224EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 1:40 p.m.39 views

CVE-2024-49655

CVE-2024-49655 is an unauthenticated SQL Injection affecting WordPress ARPrice pricing plugin (versions up to 4.0.3). The provided documents confirm a high-severity, network-exploit vector (CVSS 3.1: 9.3) but do not specify a patched fixed version or concrete remediation steps in the supplied data.

9.3CVSS7.3AI score0.00224EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.1 views

WordPress plugin ARPrice 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

9.8CVSS8.4AI score0.00474EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.1 views

WordPress plugin ARPrice 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS7.7AI score0.00074EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/01/10 4:15 p.m.71 views

Exploit for CVE-2024-49699

CVE-2024-49699 ARPrice...

8.8CVSS7.7AI score0.04594EPSS
Exploits3
Patchstack
Patchstack
added 2025/01/03 3:13 p.m.1 views

WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin ARPrice versions = 4.1.3...

9.3CVSS8.1AI score0.00224EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/03 2:56 p.m.2 views

WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin ARPrice versions = 4.1.3...

7.1CVSS6.1AI score0.00074EPSS
Exploits0Affected Software1
Rows per page
Query Builder