Lucene search
+L

4257 matches found

Patchstack
Patchstack
•added 2025/12/31 5:14 p.m.•29 views

WordPress Accessibility Press plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HunSec in WordPress Plugin Accessibility Press versions = 1.0.2...

5.9CVSS5.9AI score0.00178EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/12/31 4:15 p.m.•20 views

CVE-2025-63004

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through = 1.15...

4.3CVSS0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 4:06 p.m.•12 views

CVE-2025-63004 WordPress All in One Accessibility plugin <= 1.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through 1.14...

4.3CVSS6AI score0.00181EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 4:06 p.m.•21 views

EUVD-2025-206024

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through 1.14...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/31 4:06 p.m.•42 views

CVE-2025-63004 WordPress All in One Accessibility plugin <= 1.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through = 1.15...

4.3CVSS0.00181EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 4:06 p.m.•41 views

CVE-2025-63004

CVE-2025-63004 involves a Missing Authorization vulnerability in the WordPress plugin All in One Accessibility by Skynet Technologies USA LLC. Public data indicates affected version range is from n/a through 1.14, with a CVSS3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). The connect...

4.3CVSS6AI score0.00181EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 3:57 p.m.•23 views

WordPress All in One Accessibility plugin <= 1.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin All in One Accessibility versions = 1.15...

4.3CVSS5.3AI score0.00181EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•13 views

PT-2025-54413

Name of the Vulnerable Software and Affected Versions ikaes Accessibility Press versions through 1.0.2 Description The software contains a flaw related to improper input handling during web page creation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

5.9CVSS6AI score0.00178EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•16 views

WordPress plugin Accessibility Press 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.9AI score0.00178EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•5 views

CVE-2025-63004: Missing Authorization

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through = 1.15...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•16 views

WordPress plugin All in One Accessibility 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•21 views

PT-2025-54383

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through 1.14...

4.3CVSS6.9AI score0.00181EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/12/31 12:00 a.m.•19 views

WordPress Accessiy By CodeConfig Accessibility plugin <= 1.0.2 - Authenticated (Subscriber+) Missing Authorization to Modify Accessibility Settings vulnerability

Authenticated Subscriber+ Missing Authorization to Modify Accessibility Settings vulnerability discovered by Peerapat Samatathanyakorn - Thai Team CVE in WordPress Plugin CodeConfig Accessibility versions = 1.0.2...

4.3CVSS5.9AI score0.00253EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•4 views

CVE-2025-49355: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press ilogic-accessibility allows Stored XSS.This issue affects Accessibility Press: from n/a through = 1.0.2...

5.9CVSS5.8AI score0.00178EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/12/27 12:00 a.m.•6 views

SUSE SLES15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2025:4527-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4527-1 advisory. Update to version 2.50.4. Security issues fixed: - CVE-2025-14174: processing maliciously crafted web content may lead to memory...

8.8CVSS7.5AI score0.3414EPSS
SaveExploits14References22
SUSE Linux
SUSE Linux
•added 2025/12/26 2:49 p.m.•13 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation bsc1255497. CVE-2025-43501: processing maliciously crafted web content may...

8.8CVSS7.4AI score0.3414EPSS
SaveExploits14References28
OSV
OSV
•added 2025/12/26 2:49 p.m.•13 views

SUSE-SU-2025:4527-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation bsc1255497. - CVE-2025-43501: processing maliciously crafted web content m...

8.8CVSS7.4AI score0.3414EPSS
SaveExploits14References15
BDU FSTEC
BDU FSTEC
•added 2025/12/26 12:00 a.m.•20 views

The vulnerability of the OwnID Passwordless Login plugin of the WordPress content management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the OwnID Passwordless Login plugin in the WordPress content management system involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

10CVSS7.5AI score0.00787EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/24 12:00 a.m.•12 views

The vulnerabilities of the functions freezer_apply_state() and freezer_change_state() in the kernel/cgroup/legacy_freezer.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the freezerapplystate and freezerchangestate functions in the kernel/cgroup/legacyfreezer.c module of the Linux operating system are related to the occurrence of mutual locking. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality,...

7.8CVSS7.5AI score0.00151EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/12/24 12:00 a.m.•16 views

The vulnerability of the SAP FICA ODN framework, related to improper code generation management, allows attackers to compromise the integrity and accessibility of data.

The vulnerability of the SAP FICA ODN framework is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of data...

7.5CVSS5.8AI score0.00311EPSS
SaveExploits0References2
Rows per page
Query Builder