Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2025/12/30 11:15 p.m.3 views

CVE-2025-68502

Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through = 2.0.20.1...

4.3CVSS5.9AI score0.00236EPSS
Exploits0References1
NVD
NVD
added 2025/12/29 10:15 p.m.3 views

CVE-2025-68502

Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through = 2.0.20.1...

4.3CVSS0.00236EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/29 9:16 p.m.24 views

CVE-2025-68502 WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through = 2.0.20.1...

4.3CVSS0.00236EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-21686

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00204EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-25328

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00321EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-21685

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00204EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.3 views

CVE-2025-53993

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through = 2.0.15...

6.5CVSS5.9AI score0.00321EPSS
Exploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.3 views

CVE-2025-53993

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through = 2.0.15...

6.5CVSS0.00321EPSS
Exploits0References1
CVE
CVE
added 2025/08/20 8:3 a.m.14 views

CVE-2025-53993

CVE-2025-53993 affects Crocoblock JetPopup (WordPress plugin) up to version 2.0.15. The issue is insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Public details across multiple sources confirm the vulnerability, its presence in JetPopup

6.5CVSS5.9AI score0.00321EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:3 a.m.2 views

CVE-2025-53993 WordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through = 2.0.15...

6.5CVSS5.2AI score0.00321EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/20 8:3 a.m.10 views

CVE-2025-53993 WordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through = 2.0.15...

6.5CVSS0.00321EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 10:59 a.m.4 views

CVE-2025-53994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetPopup jet-popup allows DOM-Based XSS.This issue affects JetPopup: from n/a through = 2.0.15...

6.5CVSS5.9AI score0.00204EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 10:59 a.m.3 views

CVE-2025-53995

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetPopup jet-popup allows Stored XSS.This issue affects JetPopup: from n/a through = 2.0.15.1...

6.5CVSS5.9AI score0.00204EPSS
Exploits0References1
NVD
NVD
added 2025/07/16 11:15 a.m.6 views

CVE-2025-53994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetPopup jet-popup allows DOM-Based XSS.This issue affects JetPopup: from n/a through = 2.0.15...

6.5CVSS0.00204EPSS
Exploits0References1
NVD
NVD
added 2025/07/16 11:15 a.m.3 views

CVE-2025-53995

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetPopup jet-popup allows Stored XSS.This issue affects JetPopup: from n/a through = 2.0.15.1...

6.5CVSS0.00204EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/16 12:0 a.m.2 views

PT-2025-29738 · Crocoblock · Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution...

6.5CVSS6.2AI score0.00204EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/07/16 12:0 a.m.1 views

PT-2025-29739 · Crocoblock · Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS flaw. This allows for the injection of...

6.5CVSS5.9AI score0.00204EPSS
Exploits0References4
Rows per page
Query Builder