Lucene search
+L

7398 matches found

NVD
NVD
added 2025/01/22 3:15 p.m.7 views

CVE-2025-23578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through = 1.9.1...

7.1CVSS0.00385EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/22 2:29 p.m.5 views

CVE-2025-23578 WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through = 1.9.1...

7.1CVSS7.2AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/22 2:29 p.m.46 views

CVE-2025-23578

CVE-2025-23578 relates to NotFound Custom CSS Addons and is described as a Reflected XSS in the plugin’s web page generation. Affected versions are listed as not explicit in the initial document (noted as from n/a through 1.9.1). Red Hat’s CISA-facing entry reiterates the same description without...

7.1CVSS7.2AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.22 views

CVE-2025-23578 WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through = 1.9.1...

7.1CVSS0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.4 views

WordPress plugin Custom CSS Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00385EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.6 views

WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Custom CSS Addons versions = 1.9.1...

7.1CVSS6.1AI score0.00385EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/01/15 4:15 p.m.5 views

CVE-2025-22786

Path Traversal vulnerability in ElementInvader ElementInvader Addons for Elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through 1.2.6...

8.8CVSS7.3AI score0.00688EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/15 4:15 p.m.22 views

CVE-2025-22758

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Harnani Elementor AI Addons ai-addons-for-elementor allows DOM-Based XSS.This issue affects Elementor AI Addons: from n/a through = 2.2.1...

6.5CVSS0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/15 3:23 p.m.41 views

CVE-2025-22758 WordPress Elementor AI Addons plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Harnani Elementor AI Addons ai-addons-for-elementor allows DOM-Based XSS.This issue affects Elementor AI Addons: from n/a through = 2.2.1...

6.5CVSS0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/15 3:23 p.m.8 views

CVE-2025-22758 WordPress Elementor AI Addons plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Harnani Elementor AI Addons ai-addons-for-elementor allows DOM-Based XSS.This issue affects Elementor AI Addons: from n/a through = 2.2.1...

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/15 3:23 p.m.54 views

CVE-2025-22758

CVE-2025-22758 is an authenticated DOM-based Cross-Site Scripting vulnerability in Elementor AI Addons (70 Widgets, Premium Templates, Ultimate Elements) caused by improper input neutralization during web page generation. Affected: Elementor AI Addons versions up to 2.2.1. Impact per the provider...

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/15 3:23 p.m.60 views

CVE-2025-22786

CVE-2025-22786 corresponds to a Path Traversal vulnerability in ElementInvader Addons for Elementor. The issue enables PHP Local File Inclusion via authenticated access (Contributor+ level) in ElementInvader Addons for Elementor

8.8CVSS7.2AI score0.00688EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/15 3:23 p.m.12 views

CVE-2025-22786 WordPress ElementInvader Addons for Elementor plugin <= 1.2.6 - Local File Inclusion vulnerability

Path Traversal vulnerability in ElementInvader ElementInvader Addons for Elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through 1.2.6...

7.5CVSS7.8AI score0.00688EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/15 3:23 p.m.32 views

CVE-2025-22786 WordPress ElementInvader Addons for Elementor plugin <= 1.2.6 - Local File Inclusion vulnerability

Path Traversal: '.../...//' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.2.6...

7.5CVSS0.00688EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/15 10:15 a.m.16 views

CVE-2024-10775

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.4.32 via the 'pafe-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS0.003EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/15 9:25 a.m.22 views

CVE-2024-10775 Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.4.32 via the 'pafe-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS0.003EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/15 9:25 a.m.5 views

CVE-2024-10775 Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.4.32 via the 'pafe-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS5.5AI score0.003EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/15 9:25 a.m.52 views

CVE-2024-10775

The CVE CVE-2024-10775 concerns the Piotnet Addons For Elementor WordPress plugin. Affected versions include all up to 2.4.32. The root cause is insufficient restrictions in the pafe-template shortcode, enabling Information Exposure. The vulnerability allows authenticated attackers with Contribut...

4.3CVSS4.4AI score0.003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/15 12:0 a.m.14 views

PT-2025-1605 · WordPress · Piotnet Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Piotnet Addons For Elementor plugin for WordPress versions up to, and including, 2.4.32 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts created by...

4.3CVSS9.5AI score0.003EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/01/15 12:0 a.m.9 views

PT-2025-4700 · Unknown · Elementinvader Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.2.6 and earlier Description: The issue is related to a Path Traversal vulnerability in ElementInvader Addons for Elementor, which allows PHP Local File Inclusion. Recommendations: For...

8.8CVSS9.3AI score0.00688EPSS
SaveExploits0References5
Rows per page
Query Builder