Lucene search
+L

5 matches found

Patchstack
Patchstack
•added 2026/05/12 10:17 a.m.•23 views

WordPress AzonPost plugin <= 1.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Julian Chibuike Nwadinobi Wackydawg - streamio in WordPress Plugin AzonPost versions = 1.3...

6.1CVSS5.8AI score0.00356EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/05/12 9:16 a.m.•66 views

CVE-2026-7437

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editposhidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00356EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/12 7:48 a.m.•12 views

CVE-2026-7437

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editposhidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6AI score0.00356EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/12 7:48 a.m.•38 views

CVE-2026-7437

CVE-2026-7437: The AzonPost WordPress plugin is vulnerable to Reflected XSS via the editpos_hidden parameter in all versions up to 1.3 due to insufficient input sanitization and output escaping. Unauthenticated attackers can cause a victim administrator to execute scripts if they are tricked into...

6.1CVSS6AI score0.00356EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/12 7:48 a.m.•69 views

CVE-2026-7437 AzonPost <= 1.3 - Reflected Cross-Site Scripting

The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the editposhidden parameter in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00356EPSS
SaveExploits0References3
Rows per page
Query Builder