Lucene search
K

8 matches found

CNVD
CNVD
added 2025/10/13 12:0 a.m.3 views

WordPress Auto Bulb Finder plugin cross-site scripting vulnerability

WordPress Auto Bulb Finder plugin is a plugin for quickly checking vehicle bulb models in a WordPress website, supporting the retrieval of appropriate auto bulb specifications by year, make, model and other information. The WordPress Auto Bulb Finder plugin suffers from a cross-site scripting...

6.4CVSS6.1AI score0.00035EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/04 11:53 a.m.15 views

CVE-2025-9858

The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abfvehicle' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS5AI score0.00035EPSS
Exploits0References1
NVD
NVD
added 2025/10/03 12:15 p.m.12 views

CVE-2025-9858

The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abfvehicle' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS0.00035EPSS
Exploits0References3
CVE
CVE
added 2025/10/03 11:17 a.m.15 views

CVE-2025-9858

CVE-2025-9858 refers to the WordPress plugin Auto Bulb Finder for WordPress with a stored cross-site scripting vulnerability in the abf_vehicle shortcode. Affected versions are up to and including 2.8.0, where insufficient input validation and output escaping allows authenticated attackers with c...

6.4CVSS4.7AI score0.00035EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/03 11:17 a.m.3 views

CVE-2025-9858 Auto Bulb Finder for WordPress <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abfvehicle' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS4.7AI score0.00035EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/03 11:17 a.m.8 views

CVE-2025-9858 Auto Bulb Finder for WordPress <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abfvehicle' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS0.00035EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/10/03 1:26 a.m.6 views

WordPress Auto Bulb Finder for WordPress plugin <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Auto Bulb Finder for WordPress versions = 2.8.0...

6.4CVSS5.6AI score0.00035EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/03 12:0 a.m.2 views

WordPress plugin Auto Bulb Finder 跨站脚本漏洞

WordPress Auto Bulb Finder plugin is a plugin for quickly checking vehicle bulb models in a WordPress website, supporting the retrieval of appropriate auto bulb specifications by year, make, model and other information. The WordPress Auto Bulb Finder plugin suffers from a cross-site scripting...

6.4CVSS6AI score0.00035EPSS
Exploits0References2
Rows per page
Query Builder