Lucene search
+L

5 matches found

CNNVD
CNNVD
added 2026/05/29 12:00 a.m.19 views

WordPress Theme Automotive Car Dealership Business 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.9AI score0.00159EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/05/28 5:26 p.m.18 views

WordPress Automotive Car Dealership Business WordPress Theme theme <= 13.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Mateusz Gierblinski in WordPress Theme Automotive Car Dealership Business versions = 13.4.1...

6.4CVSS5.8AI score0.00159EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/28 7:47 a.m.22 views

CVE-2025-14040

The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Call to Action' custom fields in all versions up to, and including, 13.4. This is due to insufficient input sanitization and output escaping on user-supplied attributes in th...

6.4CVSS6.1AI score0.00269EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/27 12:00 a.m.16 views

WordPress plugin Automotive Car Dealership Business 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.8AI score0.00269EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/26 11:28 p.m.13 views

WordPress Automotive Car Dealership Business WordPress Theme plugin <= 13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action Fields vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Call to Action Fields vulnerability discovered by Mateusz Gierblinski in WordPress Theme Automotive Car Dealership Business versions = 13.4...

6.4CVSS5.4AI score0.00269EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder