Lucene search
+L

26 matches found

CNVD
CNVD
•added 2025/09/25 12:00 a.m.•11 views

Unspecified Vulnerability in WordPress Plugin Advanced Views

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Advanced Views, which can be exploited ...

8.8CVSS7.2AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/23 3:34 a.m.•8 views

CVE-2025-10380 Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI

The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and including, 3.7.19. This is due to insufficient input sanitization and lack of access control when processing custom Twig templates in the Mod...

8.8CVSS6.7AI score0.00437EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/23 3:34 a.m.•62 views

CVE-2025-10380

The CVE-2025-10380 entry describes a Server-Side Template Injection (SSTI) in the WordPress plugin Advanced Views – Display Posts, Custom Fields, and More (ACF-Views) affecting all versions up to and including 3.7.19. Root cause: insufficient input sanitization and lack of access control when pro...

8.8CVSS6.8AI score0.00437EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•1 views

CVE-2025-10380: Improper Neutralization of Special Elements Used in a Template Engine

The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and including, 3.7.19. This is due to insufficient input sanitization and lack of access control when processing custom Twig templates in the Mod...

8.8CVSS6.2AI score0.00437EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/23 12:00 a.m.•15 views

WordPress plugin Advanced Views 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Advanced Views, which can be exploited ...

8.8CVSS7.4AI score0.00437EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/09/22 10:15 p.m.•12 views

WordPress Advanced Views plugin <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI vulnerability

Authenticated Author+ Remote Code Execution via SSTI vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin Advanced Views versions = 3.7.19...

8.8CVSS7.2AI score0.00437EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder