Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-7437

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editposhidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS5.7AI score0.00089EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/12 10:17 a.m.11 views

WordPress AzonPost plugin <= 1.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Julian Chibuike Nwadinobi Wackydawg - streamio in WordPress Plugin AzonPost versions = 1.3...

6.1CVSS5.8AI score0.00089EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/05/12 9:16 a.m.8 views

CVE-2026-7437

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editposhidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00089EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/12 7:48 a.m.30 views

CVE-2026-7437 AzonPost <= 1.3 - Reflected Cross-Site Scripting

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editposhidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00089EPSS
Exploits0References3
CVE
CVE
added 2026/05/12 7:48 a.m.9 views

CVE-2026-7437

CVE-2026-7437: The AzonPost WordPress plugin is vulnerable to Reflected XSS via the editpos_hidden parameter in all versions up to 1.3 due to insufficient input sanitization and output escaping. Unauthenticated attackers can cause a victim administrator to execute scripts if they are tricked into...

6.1CVSS6AI score0.00089EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/12 7:48 a.m.5 views

CVE-2026-7437

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editposhidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6AI score0.00089EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.5 views

WordPress plugin AzonPost 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.8AI score0.00089EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.7 views

PT-2026-39969

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editpos hidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

6.1CVSS6AI score0.00089EPSS
Exploits0References4
Rows per page
Query Builder