Lucene search
+L

20 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 8:46 a.m.•22 views

CVE-2025-23679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flourish Pixel FP RSS Category Excluder fp-rss-category-excluder allows Reflected XSS.This issue affects FP RSS Category Excluder: from n/a through = 1.0.0...

7.1CVSS8.1AI score0.00386EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-22827

Malware in sbrugna...

8.8CVSS8AI score0.00898EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-3338

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/22 3:15 p.m.•18 views

CVE-2025-23679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flourish Pixel FP RSS Category Excluder fp-rss-category-excluder allows Reflected XSS.This issue affects FP RSS Category Excluder: from n/a through = 1.0.0...

7.1CVSS0.00386EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/01/22 3:15 p.m.•12 views

CVE-2025-23679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flourish Pixel FP RSS Category Excluder fp-rss-category-excluder allows Reflected XSS.This issue affects FP RSS Category Excluder: from n/a through = 1.0.0...

7.1CVSS8.6AI score0.00386EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/22 2:29 p.m.•49 views

CVE-2025-23679 WordPress FP RSS Category Excluder plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flourish Pixel FP RSS Category Excluder fp-rss-category-excluder allows Reflected XSS.This issue affects FP RSS Category Excluder: from n/a through = 1.0.0...

7.1CVSS0.00386EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•10 views

PT-2025-5017

Name of the Vulnerable Software and Affected Versions Moshiur Rahman Mehedi FP RSS Category Excluder versions 1.0.0 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS...

7.1CVSS8.4AI score0.00386EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•8 views

CVE-2025-23679: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flourish Pixel FP RSS Category Excluder fp-rss-category-excluder allows Reflected XSS.This issue affects FP RSS Category Excluder: from n/a through = 1.0.0...

7.1CVSS8.6AI score0.00386EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•20 views

WordPress FP RSS Category Excluder plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin FP RSS Category Excluder versions = 1.0.0...

7.1CVSS8.4AI score0.00386EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2021/01/12 12:00 a.m.•17 views

WordPress ultimate-category-excluder plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Ultimate-category-excluder Plugin...

8.8CVSS6.7AI score0.00898EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/12/11 5:15 a.m.•15 views

CVE-2020-35135

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

8.8CVSS5.8AI score0.00898EPSS
SaveExploits1References3
Prion
Prion
•added 2020/12/11 5:15 a.m.•24 views

Cross site request forgery (csrf)

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

6.8CVSS8.7AI score0.00898EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2020/12/11 4:52 a.m.•8 views

CVE-2020-35135

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

8.8CVSS0.00898EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/12/11 4:52 a.m.•33 views

CVE-2020-35135

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

8.8AI score0.00898EPSS
SaveExploits1References3
CVE
CVE
•added 2020/12/11 4:52 a.m.•87 views

CVE-2020-35135

The CVE-2020-35135 issue affects the WordPress plugin “ultimate-category-excluder” (versions prior to 1.2). The root cause is a CSRF vulnerability in the ultimate-category-excluder.php file stemming from insufficient CSRF protections on the plugin’s options page. Affected component: plugin PHP co...

8.8CVSS8.7AI score0.00898EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2020/12/11 12:00 a.m.•23 views

WordPress Ultimate Category Excluder plugin <= 1.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by SCA AppSec Checkmarx in WordPress Ultimate Category Excluder plugin versions = 1.1. Solution Update the WordPress Ultimate Category Excluder plugin to the latest available version at least 1.2...

3.1AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2020/12/11 12:00 a.m.•26 views

Ultimate Category Excluder < 1.2 - Cross-Site Request Forgery

The plugin did not check for CSRF nonce in its options page, allowing attacker to perform CSRF attacks against logged in users...

6.8CVSS4.7AI score0.00898EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•21 views

WordPress Ultimate-Category-Excluder plugin has a cross-site request forgeing vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Ultimate-category-excluder Plugin...

8.8CVSS7.2AI score0.00898EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/11 12:00 a.m.•11 views

CVE-2020-35135: Cross-Site Request Forgery (CSRF)

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

8.8CVSS5.8AI score0.00898EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/12/11 12:00 a.m.•15 views

PT-2020-17265 · WordPress · Ultimate-Category-Excluder

Name of the Vulnerable Software and Affected Versions: ultimate-category-excluder plugin versions prior to 1.2 Description: The issue allows for CSRF in the ultimate-category-excluder.php file. Recommendations: For versions prior to 1.2, update to version 1.2 or later to resolve the issue...

8.8CVSS8.6AI score0.00898EPSS
SaveExploits1References5
Rows per page
Query Builder