Lucene search
+L

1792 matches found

CNNVD
CNNVD
•added 2025/11/27 12:00 a.m.•30 views

WordPress plugin Reuters Direct 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.3AI score0.00224EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/27 12:00 a.m.•21 views

WordPress plugin WP Fastest Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

4.3CVSS6.3AI score0.00219EPSS
SaveExploits0References4
NVD
NVD
•added 2025/11/25 8:15 a.m.•23 views

CVE-2025-13386

The Social Images Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'optionsupdate' function in all versions up to, and including, 2.1. This makes it possible for unauthenticated attackers to delete the plugin's settings via a...

5.3CVSS0.0027EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/25 7:28 a.m.•24 views

CVE-2025-13389 Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure

The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getorderbyid function in all versions up to, and including, 14. This makes it possible for unauthenticated attackers t...

5.3CVSS0.00284EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/11/25 7:28 a.m.•33 views

CVE-2025-13414 Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export

The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to unauthorized data export due to a missing capability check on the cdashwatchforexport function in all versions up to, and including, 3.3.11. This makes it possible for unauthenticated attackers to export business...

5.3CVSS0.00275EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•31 views

PT-2025-48014

The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to unauthorized data export due to a missing capability check on the cdash watch for export function in all versions up to, and including, 3.3.11. This makes it possible for unauthenticated attackers to export business...

5.3CVSS5.3AI score0.00275EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•16 views

WordPress plugin Search Exclude 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.4AI score0.00182EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/22 8:35 a.m.•31 views

CVE-2025-10938

The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08. This is due to missing capability checks in the 'uipprocessblockquery' AJAX function. This makes it possible for authenticated attackers, with subscriber-level acces...

6.5CVSS5.5AI score0.00248EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/22 12:00 a.m.•16 views

WordPress plugin GSheetConnector For Ninja Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.3AI score0.002EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/21 8:15 a.m.•14 views

CVE-2025-10938

The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08. This is due to missing capability checks in the 'uipprocessblockquery' AJAX function. This makes it possible for authenticated attackers, with subscriber-level acces...

6.5CVSS0.00248EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/21 7:31 a.m.•32 views

CVE-2025-10938 UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08. This is due to missing capability checks in the 'uipprocessblockquery' AJAX function. This makes it possible for authenticated attackers, with subscriber-level acces...

6.5CVSS0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•16 views

WordPress plugin UiPress lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.4CVSS6.5AI score0.00211EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•13 views

WordPress plugin TokenICO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.4AI score0.00225EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•14 views

WordPress plugin UiPress lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.2AI score0.00248EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/11/20 9:37 p.m.•27 views

CVE-2025-12174

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'directoristpreparelistingsexportfile' and 'directoristtypeslugchange' AJAX actions in all versions up to, and...

6.5CVSS5.2AI score0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/20 12:00 a.m.•15 views

PT-2025-47672

Name of the Vulnerable Software and Affected Versions UiPress lite plugin for WordPress versions prior to 3.5.09 Description The UiPress lite plugin for WordPress is susceptible to exposure of sensitive information. This is a result of absent capability checks within the uip process block query...

6.5CVSS5.8AI score0.00248EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/11/20 12:00 a.m.•16 views

WordPress plugin Ultimate Member Widgets for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

5.3CVSS6.2AI score0.00238EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/19 6:15 a.m.•20 views

CVE-2025-12174

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'directoristpreparelistingsexportfile' and 'directoristtypeslugchange' AJAX actions in all versions up to, and...

6.5CVSS0.00197EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/19 12:00 a.m.•14 views

WordPress plugin WP Login and Register using JWT 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.002EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/19 12:00 a.m.•17 views

WordPress plugin Directorist 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.5AI score0.00197EPSS
SaveExploits0References3
Rows per page
Query Builder