Lucene search
+L

29 matches found

Cvelist
Cvelist
•added 2025/11/07 5:29 a.m.•35 views

CVE-2025-12520 WP Airbnb Review Slider <= 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting

The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL validation that allows users to pull in a malicious HTML file. This makes it possible for authenticated attackers, wit...

4CVSS0.00234EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/07 5:29 a.m.•52 views

CVE-2025-12520

The CVE-2025-12520 entry refers to a Stored Cross-Site Scripting vulnerability in the WordPress WP Airbnb Review Slider plugin (versions ≤ 4.2). The root cause is insufficient URL validation that allows loading a malicious HTML file, enabling authenticated attackers with administrator-level privi...

4CVSS6AI score0.00234EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/07 5:29 a.m.•7 views

CVE-2025-12520 WP Airbnb Review Slider <= 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting

The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL validation that allows users to pull in a malicious HTML file. This makes it possible for authenticated attackers, wit...

4CVSS6AI score0.00234EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/11/07 5:29 a.m.•17 views

EUVD-2025-38236

The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL validation that allows users to pull in a malicious HTML file. This makes it possible for authenticated attackers, wit...

4CVSS4.5AI score0.00234EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2025/11/07 1:46 a.m.•18 views

WordPress WP Airbnb Review Slider plugin <= 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by CyberResearchHub.com in WordPress Plugin WP Airbnb Review Slider versions = 4.2...

4CVSS5.5AI score0.00234EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•3 views

CVE-2025-12520: Improper Neutralization of Input During Web Page Generation

The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL validation that allows users to pull in a malicious HTML file. This makes it possible for authenticated attackers, wit...

4CVSS6AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/07 12:00 a.m.•24 views

PT-2025-45409

Name of the Vulnerable Software and Affected Versions WP Airbnb Review Slider plugin for WordPress versions up to and including 4.2 Description The WP Airbnb Review Slider plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient URL validation allows...

4CVSS5.1AI score0.00234EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-4235

Malicious code in bioql PyPI...

7.6CVSS7.9AI score0.00386EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-27973

Malicious code in bioql PyPI...

8.8CVSS7.5AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:12 a.m.•18 views

CVE-2023-23890

Cross-Site Request Forgery CSRF vulnerability in LJ Apps WP Airbnb Review Slider plugin = 3.2 versions...

8.8CVSS7.1AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/18 10:25 p.m.•21 views

CVE-2025-26755

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through = 3.9...

7.6CVSS7.3AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/16 11:15 p.m.•32 views

CVE-2025-26755

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through = 3.9...

7.6CVSS0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/16 10:17 p.m.•35 views

CVE-2025-26755 WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through = 3.9...

7.6CVSS0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/16 10:17 p.m.•20 views

CVE-2025-26755 WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through = 3.9...

7.6CVSS7.3AI score0.00386EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/16 10:17 p.m.•119 views

CVE-2025-26755

CVE-2025-26755 concerns the WordPress plugin WP Airbnb Review Slider. The vulnerability is an SQL Injection due to improper neutralization of input in the plugin, allowing Blind SQL Injection on versions

7.6CVSS7.3AI score0.00386EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•6 views

PT-2025-7222

Name of the Vulnerable Software and Affected Versions: jgwhite33 WP Airbnb Review Slider versions 3.9 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL...

7.6CVSS0.00386EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/02/16 12:00 a.m.•18 views

WordPress plugin WP Airbnb Review Slider SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin W...

7.6CVSS8.8AI score0.00386EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/16 12:00 a.m.•7 views

CVE-2025-26755: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through = 3.9...

7.6CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/14 2:39 p.m.•18 views

WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin WP Airbnb Review Slider versions = 3.9...

7.6CVSS8.1AI score0.00386EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/05/20 11:15 p.m.•18 views

CVE-2023-23890

Cross-Site Request Forgery CSRF vulnerability in LJ Apps WP Airbnb Review Slider plugin = 3.2 versions...

8.8CVSS7.3AI score0.00264EPSS
SaveExploits0References1
Rows per page
Query Builder