Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

351 matches found

CVE
CVE•added 2024/07/04 6:08 p.m.•70 views

CVE-2024-37476

CVE-2024-37476 is a Stored XSS affecting Automattic Newspack Campaigns (WordPress plugin) up to version 2.31.1. The vulnerability is confirmed in WordPress ecosystem sources; remediation is to upgrade Newspack Campaigns to a version where the fix is in place (patched). No exploitation activity is...

6.5CVSS6.1AI score0.00294EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2024/07/04 6:08 p.m.•36 views

CVE-2024-37476 WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1...

6.5CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/07/04 6:08 p.m.•22 views

CVE-2024-37476 WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1...

6.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1
OSV
OSV•added 2024/07/04 6:08 p.m.•11 views

CVE-2024-37476 WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1...

6.5CVSS5.9AI score
SaveExploits0References3
OSV
OSV•added 2024/06/27 7:43 a.m.•32 views

BIT-WORDPRESS-2024-31111 WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

6.5CVSS6.5AI score0.0034EPSS
SaveExploits0References3
OSV
OSV•added 2024/06/27 7:43 a.m.•53 views

BIT-WORDPRESS-2024-32111 WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS5.3AI score0.00478EPSS
SaveExploits0References3
OSV
OSV•added 2024/06/27 7:42 a.m.•30 views

BIT-WORDPRESS-MULTISITE-2024-31111 WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

6.5CVSS6.5AI score0.0034EPSS
SaveExploits0References3
OSV
OSV•added 2024/06/27 7:41 a.m.•22 views

BIT-WORDPRESS-MULTISITE-2024-32111 WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS5.3AI score0.00478EPSS
SaveExploits0References3
NVD
NVD•added 2024/06/25 2:15 p.m.•39 views

CVE-2024-32111

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS0.00478EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2024/06/25 2:15 p.m.•96 views

CVE-2024-32111

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS5.9AI score0.00478EPSS
SaveExploits0References3
OSV
OSV•added 2024/06/25 2:15 p.m.•5 views

UBUNTU-CVE-2024-32111

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS5.8AI score0.00478EPSS
SaveExploits0References4
OSV
OSV•added 2024/06/25 2:15 p.m.•48 views

CVE-2024-32111

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS6.7AI score0.00478EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE•added 2024/06/25 1:35 p.m.•56 views

CVE-2024-32111

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS5.8AI score0.00478EPSS
SaveExploits0
NVD
NVD•added 2024/06/25 1:15 p.m.•31 views

CVE-2024-31111

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

6.5CVSS0.0034EPSS
SaveExploits0References2
OSV
OSV•added 2024/06/25 1:15 p.m.•31 views

CVE-2024-31111

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

6.6AI score
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2024/06/25 1:15 p.m.•37 views

CVE-2024-31111

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

6.5CVSS5.9AI score0.0034EPSS
SaveExploits0References3
CVE
CVE•added 2024/06/25 12:54 p.m.•339 views

CVE-2024-31111

CVE-2024-31111 is a stored XSS in WordPress core caused by improper neutralization of input during web page generation. The vulnerability affects WordPress versions ranging from 5.9 to 6.5.4 and 6.0 to 6.0.8, 6.1 to 6.1.6, 6.2 to 6.2.5, 6.3 to 6.3.4, 6.4 to 6.4.4, and 6.5 to 6.5.4 (per the initia...

6.5CVSS6.7AI score0.0034EPSS
SaveExploits0References2
Debian CVE
Debian CVE•added 2024/06/25 12:54 p.m.•62 views

CVE-2024-31111

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0
NVD
NVD•added 2024/06/19 11:15 a.m.•50 views

CVE-2023-47788

Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7...

8.8CVSS0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/06/19 10:33 a.m.•27 views

CVE-2023-47788 WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability

Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7...

4.3CVSS6.9AI score0.00393EPSS
SaveExploits0References1
Rows per page
Query Builder