Lucene search
K

14 matches found

NVD
NVD
added 2026/03/05 6:16 a.m.1 views

CVE-2026-27385

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through = 1.3...

7.1CVSS0.00045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.2 views

CVE-2026-27385 WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through = 1.3...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.28 views

CVE-2026-27385 WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through = 1.3...

7.1CVSS0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.9 views

CVE-2026-27385

CVE-2026-27385 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin DesignThemes Portfolio (designthemes-portfolio), with the affected range listed as up to version 1.3. The issue is described as Improper Neutralization of Input During Web Page Generation. Public source...

7.1CVSS5.9AI score0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:53 a.m.1 views

CVE-2026-27385

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through = 1.3...

5.9AI score0.00045EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.1 views

PT-2026-23259

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through = 1.3...

5.9AI score0.00045EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

WordPress plugin DesignThemes Portfolio 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

7.1CVSS5.7AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/24 6:15 a.m.4 views

WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin DesignThemes Portfolio versions = 1.3...

7.1CVSS5.3AI score0.00045EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/31 11:5 a.m.1 views

CVE-2025-68980

Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Portfolio: from n/a through = 1.0.2...

5.3CVSS7AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/30 12:30 p.m.1 views

EUVD-2025-205758

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio Addon designthemes-portfolio-addon allows DOM-Based XSS.This issue affects DesignThemes Portfolio Addon: from n/a through = 1.5...

6.1CVSS5.9AI score0.00024EPSS
Exploits0References2
NVD
NVD
added 2025/12/30 11:15 a.m.1 views

CVE-2025-68977

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio Addon designthemes-portfolio-addon allows DOM-Based XSS.This issue affects DesignThemes Portfolio Addon: from n/a through = 1.5...

6.5CVSS0.00024EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/30 10:47 a.m.1 views

CVE-2025-68977 WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio Addon designthemes-portfolio-addon allows DOM-Based XSS.This issue affects DesignThemes Portfolio Addon: from n/a through = 1.5...

6.5CVSS6AI score0.00024EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

WordPress plugin DesignThemes Portfolio Addon 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.7AI score0.00024EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/17 9:16 a.m.3 views

WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin DesignThemes Portfolio Addon versions = 1.5...

6.1CVSS6.1AI score0.00024EPSS
Exploits0Affected Software1
Rows per page
Query Builder