Lucene search
+L

29 matches found

Nuclei
Nuclei
•added 2026/09/30 2:12 a.m.•58 views

Advanced Text Widget < 2.0.2 - Cross-Site Scripting

A cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. id: CVE-2011-4618 info: name: Advanced Text Widget 2.0.2 - Cross-Site Scripting author:...

4.3CVSS5.8AI score0.10083EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2011-4541

Malware in sbrugna...

4.3CVSS6.4AI score0.10083EPSS
SaveExploits2References10
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-30336

Malicious code in bioql PyPI...

5.9CVSS6.3AI score0.00369EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-30317

Malicious code in bioql PyPI...

5.3CVSS8.6AI score0.00442EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:29 a.m.•23 views

CVE-2023-26539

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Max Chirkov Advanced Text Widget plugin = 2.1.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:10 a.m.•15 views

CVE-2023-26520

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

5.3CVSS8AI score0.00442EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•27 views

CVE-2023-26520

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

5.3CVSS0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:31 a.m.•59 views

CVE-2023-26520 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

5.3CVSS0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:31 a.m.•13 views

CVE-2023-26520 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget advanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through = 2.1.2...

5.3CVSS7.3AI score0.00442EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•2 views

CVE-2023-26520: Missing Authorization

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

5.3CVSS5.9AI score0.00442EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•13 views

WordPress plugin Advanced Text Widget 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.3AI score0.00442EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•15 views

PT-2024-22187 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons and Templates plugin for WordPress versions up to, and including, 1.3.96 Description: The issue is related to Stored Cross-Site Scripting via the Image Grid & Advanced Text widget HTML tags due to insufficient input...

6.4CVSS5.9AI score0.0043EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•4 views

CVE-2024-2799: Improper Neutralization of Input During Web Page Generation

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid & Advanced Text widget HTML tags in all versions up to, and including, 1.3.96 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS6AI score0.0043EPSS
SaveExploits0References3
NVD
NVD
•added 2023/06/22 12:15 p.m.•30 views

CVE-2023-26539

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Max Chirkov Advanced Text Widget plugin = 2.1.2 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/22 12:15 p.m.•15 views

CVE-2023-26539

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Max Chirkov Advanced Text Widget plugin = 2.1.2 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/06/22 11:50 a.m.•21 views

CVE-2023-26539 WordPress Advanced Text Widget Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Max Chirkov Advanced Text Widget plugin = 2.1.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/22 11:50 a.m.•52 views

CVE-2023-26539

CVE-2023-26539 affects the WordPress plugin Advanced Text Widget (versions

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/22 12:00 a.m.•3 views

CVE-2023-26539: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Max Chirkov Advanced Text Widget plugin = 2.1.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/22 12:00 a.m.•18 views

WordPress plugin Advanced Text Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.2AI score0.00369EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2014/08/01 10:58 a.m.•11 views

Advanced Text Widget <= 2.0.0 - Cross Site Scripting

The Advanced Text Widget WordPress plugin was affected by a Cross Site Scripting security vulnerability...

1.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder