Lucene search
+L

1107 matches found

Patchstack
Patchstack
added 2024/12/17 6:41 a.m.10 views

WordPress Landing Page Cat plugin <= 1.7.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k in WordPress Plugin Landing Page Cat versions = 1.7.7...

7.1CVSS5.8AI score0.00315EPSS
SaveExploits1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/12 5:24 a.m.11 views

CVE-2024-12072 Analytics Cat – Google Analytics Made Easy <= 1.1.2 - Reflected Cross-Site Scripting

The Analytics Cat – Google Analytics Made Easy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to inject...

6.1CVSS7.4AI score0.00291EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/12 5:24 a.m.29 views

CVE-2024-12072 Analytics Cat – Google Analytics Made Easy <= 1.1.2 - Reflected Cross-Site Scripting

The Analytics Cat – Google Analytics Made Easy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/12 12:00 a.m.12 views

PT-2024-17428 · WordPress · Analytics Cat

Name of the Vulnerable Software and Affected Versions: Analytics Cat – Google Analytics Made Easy plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL...

6.1CVSS6.9AI score0.00291EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.13 views

WordPress plugin Analytics Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS8AI score0.00291EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/03 11:15 a.m.23 views

CVE-2024-11326

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00344EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/03 11:04 a.m.31 views

CVE-2024-11326 Campaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00344EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/03 11:04 a.m.57 views

CVE-2024-11326

CVE-2024-11326 relates to the WordPress plugin Campaign Monitor Forms by Optin Cat. It describes a Reflected Cross-Site Scripting vulnerability in all versions up to 2.5.7 caused by using add_query_arg without proper escaping on the URL. This enables unauthenticated attackers to inject JavaScript...

6.1CVSS6.1AI score0.00344EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/03 9:32 a.m.18 views

CVE-2024-11325 AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web script...

5.2CVSS6.5AI score0.00962EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/03 9:32 a.m.72 views

CVE-2024-11325

CVE-2024-11325 concerns the AWeber Forms by Optin Cat WordPress plugin. It is a Reflected Cross-Site Scripting vulnerability caused by improper escaping of add_query_arg usage, affecting all versions up to and including 2.5.7. Unauthenticated attackers could inject arbitrary scripts into pages ex...

5.2CVSS5.1AI score0.00962EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/03 9:32 a.m.50 views

CVE-2024-11325 AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web script...

5.2CVSS0.00962EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/03 12:00 a.m.15 views

WordPress plugin AWeber Forms by Optin Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

5.2CVSS7.4AI score0.00962EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/03 12:00 a.m.11 views

PT-2024-16911 · WordPress · Aweber Forms

Name of the Vulnerable Software and Affected Versions: AWeber Forms by Optin Cat plugin for WordPress versions up to, and including, 2.5.7 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows...

5.2CVSS6.8AI score0.00962EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/12/03 12:00 a.m.8 views

WordPress plugin Campaign Monitor Forms by Optin Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.1CVSS7.3AI score0.00344EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/12/02 11:55 p.m.10 views

WordPress Campaign Monitor Forms by Optin Cat plugin <= 2.5.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Campaign Monitor Forms versions = 2.5.7...

6.1CVSS6.3AI score0.00344EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2024/11/11 11:55 a.m.12 views

New GootLoader Campaign Targets Users Searching for Bengal Cat Laws in Australia

In an unusually specific campaign, users searching about the legality of Bengal Cats in Australia are being targeted with the GootLoader malware. "In this case, we found the GootLoader actors using search results for information about a particular cat and a particular geography being used to...

6.8AI score
SaveExploits0
NVD
NVD
added 2024/11/09 4:15 a.m.34 views

CVE-2024-9226

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.7.6. This makes it possible for...

6.1CVSS0.0037EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/09 3:18 a.m.30 views

CVE-2024-9226 Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.6 - Reflected Cross-Site Scripting

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.7.6. This makes it possible for...

6.1CVSS0.0037EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/09 3:18 a.m.54 views

CVE-2024-9226

CVE-2024-9226 affects the Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages WordPress plugin. It is a Reflected Cross-Site Scripting (XSS) via add_query_arg that is vulnerable in all versions up to 1.7.6. The issue enables unauthenticated attackers to inject arbitrary scripts ...

6.1CVSS6AI score0.0037EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/09 3:18 a.m.13 views

CVE-2024-9226 Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.6 - Reflected Cross-Site Scripting

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.7.6. This makes it possible for...

6.1CVSS6.4AI score0.0037EPSS
SaveExploits0References3
Rows per page
Query Builder