Lucene search
+L

9453 matches found

CNNVD
CNNVD
•added 2025/10/16 12:00 a.m.•19 views

WordPress plugin Ultimate Addons for WPBakery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

6.4CVSS5.5AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/16 12:00 a.m.•8 views

PT-2025-42405

Name of the Vulnerable Software and Affected Versions Ultimate Addons for WPBakery plugin for WordPress versions prior to 3.21.1 Description The Ultimate Addons for WPBakery plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping...

6.4CVSS6.1AI score0.00295EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•6 views

CVE-2025-11814: Improper Neutralization of Input During Web Page Generation

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to 3.21.1 exclusive due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

6.4CVSS5.9AI score0.00295EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/10/14 7:10 a.m.•20 views

WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by ? in WordPress Plugin Case Addons versions 1.3.0...

9.9CVSS7AI score0.00448EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/14 6:44 a.m.•33 views

CVE-2025-9698

The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...

6.8CVSS5.5AI score0.00308EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/13 11:48 a.m.•15 views

WordPress The Plus Addons for Elementor plugin < 6.3.16 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Tan Nguyen in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions 6.3.16...

6.8CVSS5.7AI score0.00308EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/13 6:32 a.m.•15 views

EUVD-2025-33964

The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...

5.1AI score0.00308EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/13 6:00 a.m.•47 views

CVE-2025-9698

The Plus Addons for Elementor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 6.3.16 . The root cause is the failure to properly sanitize SVG file contents , which allows users with Author-level access or higher to execute malicious scripts. To mitigate th...

5.9AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/13 12:00 a.m.•5 views

CVE-2025-9698: Undefined Security Weakness

The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...

6.8CVSS5.8AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/13 12:00 a.m.•17 views

WordPress plugin The Plus Addons for Elementor 安全漏洞

WordPress The Plus Addons for Elementor plugin is a plugin designed specifically for the Elementor page builder, offering over 120 custom widgets and extensions and more than 1000 pre-designed templates. A cross-site scripting vulnerability exists in WordPress The Plus Addons for Elementor plugin...

6.8CVSS6.2AI score0.00308EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/13 12:00 a.m.•16 views

WordPress Easy Elementor Addons plugin cross-site scripting vulnerability

The WordPress Elementor Addons plugin is a plugin that extends the Elementor page builder functionality and enhances site design capabilities by providing additional widgets and styles. A cross-site scripting vulnerability exists in the WordPress Easy Elementor Addons plugin, which stems from the...

6.4CVSS6.1AI score0.00338EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/10 4:00 a.m.•12 views

WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter in WordPress Plugin Ultimate Addons for WPBakery Page Builder versions 3.21.1...

6.5CVSS5.6AI score0.00165EPSS
SaveExploits0Affected Software1
Mageia
Mageia
•added 2025/10/10 3:12 a.m.•29 views

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.105 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel. The newer meta-task and mageia-repos packages are required to simplify the correct installation of the kernel-stable-userspace-headers...

9.8CVSS6.7AI score0.09956EPSS
SaveExploits4References5
osv_mgasa
osv_mgasa
•added 2025/10/10 3:12 a.m.•27 views

MGASA-2025-0235 Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.105 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel. The newer meta-task and mageia-repos packages are required to simplify the correct installation of the kernel-stable-userspace-headers...

9.8CVSS6.6AI score0.09956EPSS
SaveExploits4References6
Veeam
Veeam
•added 2025/10/09 12:00 a.m.•83 views

Appliance Installation Stuck on "Configuring addons"

Challenge During the deployment of a Veeam Backup & Replication v13 appliance Veeam Software Appliance, Veeam Infrastructure Appliance, or Veeam Hardened Repository, the installer stalls on the "Configuring addons" step. When this occurs, switching to tty1 Ctrl+Alt+F1, then using Alt+Tab to switc...

6.9AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/07 6:09 a.m.•38 views

CVE-2025-9703

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

4.3CVSS6.2AI score0.00177EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2008-2538

Malware in sbrugna...

5CVSS6.4AI score0.03622EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•43 views

EUVD-2020-2712

Malware in sbrugna...

9.8CVSS8.1AI score0.08877EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-11187

Malware in sbrugna...

5.4CVSS6AI score0.0059EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-11206

Malware in sbrugna...

5.4CVSS6AI score0.00636EPSS
SaveExploits1References3
Rows per page
Query Builder