CISCO-SA-20181003-UC

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:31+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793266699702...

WordPress Pure CSS Circle Progress bar plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Pure CSS Circle Progress Bar versions = 1.2...

CVE-2024-11385

The Pure CSS Circle Progress bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'circleprogress' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2024-11385

The Pure CSS Circle Progress bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'circleprogress' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2024-11385 Pure CSS Circle Progress bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Pure CSS Circle Progress bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'circleprogress' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

WordPress plugin Pure CSS Circle Progress bar: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

CVE-2024-11385: Improper Neutralization of Input During Web Page Generation

The Pure CSS Circle Progress bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'circleprogress' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

WordPress Pure CSS Circle Progress Bar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Pure CSS Circle Progress Bar Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11385 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 92b64818bcc8 Credits SOPROBRO...

PT-2024-16950

Name of the Vulnerable Software and Affected Versions Pure CSS Circle Progress bar plugin for WordPress versions up to, and including, 1.2 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'circle progress' shortcode due to insufficient input sanitization and output...

CVE-2024-34167

creationtimestamp| type| source ---|---|--- 2024-11-13 23:43:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113478296139698010 2025-11-17 10:43:25+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m5t23yf2qc25...

CVE-2024-43086

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:37+00:00| seen| https://t.me/cvedetector/10854...

CVE-2024-42312

creationtimestamp| type| source ---|---|--- 2024-08-17 12:18:02+00:00| seen| https://t.me/cvedetector/3399 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-42068

creationtimestamp| type| source ---|---|--- 2024-07-29 18:48:43+00:00| seen| https://t.me/cvedetector/1887 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

PT-2024-28643

Name of the Vulnerable Software and Affected Versions Soft Circle French-Bread Melty Blood: Actress Again versions Current Code through 1.07 Rev. 1.4.0 Description The issue allows a remote attacker to execute arbitrary code on a client's machine via a crafted packet on TCP port 46318...

CVE-2024-39704: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Soft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. 1.4.0 allows a remote attacker to execute arbitrary code on a client's machine via a crafted packet on TCP port 46318...

MAL-2024-2130 Malicious code in down_load_ebook_angriffsziel_circle_by_will_jordan_c4qbc (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1984 Malicious code in circle-flags (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in circle-flags (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-4275

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Interactive Circle widget in all versions up to, and including, 5.9.19 due to insufficient input sanitization and...

CVE-2024-4275: Improper Neutralization of Input During Web Page Generation

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Interactive Circle widget in all versions up to, and including, 5.9.19 due to insufficient input sanitization and...