Lucene search
+L

308 matches found

Vulnrichment
Vulnrichment
added 2025/04/17 3:48 p.m.3 views

CVE-2025-27285 WordPress Easy Form by AYS Plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Easy Form easy-form allows Reflected XSS.This issue affects Easy Form: from n/a through = 2.6.9...

7.1CVSS8.6AI score0.00276EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.6 views

PT-2025-17033 · Unknown · Ays Pro Poll Maker

Name of the Vulnerable Software and Affected Versions: Ays Pro Poll Maker versions through 5.5.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.5.0,...

9.8CVSS6.4AI score0.00405EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/12 8:58 a.m.31 views

CVE-2025-32275

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

5.3CVSS7.2AI score0.00305EPSS
Exploits0References1
NVD
NVD
added 2025/04/10 8:15 a.m.42 views

CVE-2025-32275

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

5.3CVSS0.00305EPSS
Exploits0References1
CVE
CVE
added 2025/04/10 8:9 a.m.88 views

CVE-2025-32275

CVE-2025-32275 is an authentication bypass in the WordPress plugin Survey Maker . The vulnerability is listed as an Unauthenticated Authorization Bypass affecting Survey Maker versions up to at least 5.1.5.7 (initial doc lists up to 5.1.5.4; Wordfence integration shows 5.1.5.7). The entry indicat...

5.3CVSS7.2AI score0.00305EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/06 5:16 p.m.12 views

CVE-2025-32133

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

5.9CVSS7.2AI score0.00384EPSS
Exploits0References1
NVD
NVD
added 2025/04/04 4:15 p.m.5 views

CVE-2025-32133

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

5.9CVSS0.00384EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/04 12:0 a.m.5 views

PT-2025-14924 · Unknown · Secure Copy Content Protection/Content Locking

Name of the Vulnerable Software and Affected Versions: Ays Pro Secure Copy Content Protection and Content Locking versions n/a through 4.5.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XS...

5.9CVSS6.2AI score0.00384EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/03 9:41 p.m.5 views

CVE-2025-30905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

7.1CVSS7.2AI score0.00366EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 9:49 a.m.13 views

CVE-2025-30774

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injection.This issue affects Quiz Maker: from n/a through = 6.6.8.7...

9.8CVSS7.3AI score0.00362EPSS
Exploits0References1
NVD
NVD
added 2025/04/01 9:15 p.m.5 views

CVE-2025-30905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

7.1CVSS0.00366EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/01 9:15 p.m.2 views

CVE-2025-30905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

7.2AI score0.00366EPSS
Exploits0References3
OSV
OSV
added 2025/04/01 6:15 a.m.3 views

CVE-2025-30774

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Quiz Maker allows SQL Injection. This issue affects Quiz Maker: from n/a through 6.6.8.7...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/04/01 6:15 a.m.27 views

CVE-2025-30774

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injection.This issue affects Quiz Maker: from n/a through = 6.6.8.7...

9.8CVSS0.00362EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.21 views

CVE-2025-30774 WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injection.This issue affects Quiz Maker: from n/a through = 6.6.8.7...

8.2CVSS0.00362EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.13 views

CVE-2025-30774 WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injection.This issue affects Quiz Maker: from n/a through = 6.6.8.7...

8.2CVSS7.4AI score0.00362EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 5:31 a.m.69 views

CVE-2025-30774

CVE-2025-30774 is an unauthenticated SQL injection in the WordPress plugin “Quiz Maker” (Quiz Maker Business). Affected: Quiz Maker versions up to 6.6.8.7 (no details on exact build metadata in the Initial/connected docs). Evidence in connected docs indicates the vulnerability exists in that plug...

9.8CVSS7.3AI score0.00362EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.11 views

PT-2025-14043

Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions n/a through 6.6.8.7 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

9.8CVSS9.3AI score0.00362EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.6 views

PT-2025-14399 · Unknown · Secure Copy Content Protection/Content Locking

Name of the Vulnerable Software and Affected Versions: Ays Pro Secure Copy Content Protection and Content Locking versions n/a through 4.4.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

7.1CVSS7AI score0.00366EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/03/29 12:6 p.m.17 views

CVE-2025-30904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through = 3.1.7...

5.9CVSS7.2AI score0.00284EPSS
Exploits0References1
Rows per page
Query Builder