Lucene search
+L

3411 matches found

NVD
NVD
•added 2025/04/11 9:15 a.m.•20 views

CVE-2025-32671

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John Weissberg Print Science Designer print-science-designer allows Path Traversal.This issue affects Print Science Designer: from n/a through = 1.3.155...

7.5CVSS0.00747EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/11 9:15 a.m.•32 views

CVE-2025-32565

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

9.3CVSS0.00536EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/11 8:43 a.m.•37 views

CVE-2025-32671 WordPress Print Science Designer plugin <= 1.3.155 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John Weissberg Print Science Designer print-science-designer allows Path Traversal.This issue affects Print Science Designer: from n/a through = 1.3.155...

7.5CVSS0.00747EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/11 8:43 a.m.•11 views

CVE-2025-32671 WordPress Print Science Designer plugin <= 1.3.155 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John Weissberg Print Science Designer allows Path Traversal. This issue affects Print Science Designer: from n/a through 1.3.155...

7.5CVSS6.8AI score0.00747EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/11 8:43 a.m.•82 views

CVE-2025-32671

Print Science Designer (WordPress plugin) is affected by CVE-2025-32671: an unauthenticated Arbitrary File Download vulnerability in Print Science Designer, affected versions from n/a through 1.3.155. The Wordfence vulnerability detail notes the issue as Unauthenticated Arbitrary File Download an...

7.5CVSS7.2AI score0.00747EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/11 8:42 a.m.•10 views

CVE-2025-32565 WordPress Neon Product Designer Plugin <= 2.1.1 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer allows SQL Injection. This issue affects Neon Product Designer: from n/a through 2.1.1...

9.3CVSS9.6AI score0.00536EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/11 8:42 a.m.•69 views

CVE-2025-32565

CVE-2025-32565: Unauthenticated SQL Injection in Neon Product Designer (WordPress plugin) allows attackers to manipulate SQL queries. Affects Neon Product Designer: from n/a through 2.1.1. CVSS 3.1 base 9.3 (CRITICAL); attack vector NETWORK, privilege requirements NONE, user interaction NONE, sco...

9.3CVSS7.3AI score0.00536EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/11 8:42 a.m.•41 views

CVE-2025-32565 WordPress Neon Product Designer Plugin <= 2.2.0 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

9.3CVSS0.00536EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/11 12:00 a.m.•19 views

PT-2025-16096 · Unknown · John Weissberg Print Science Designer

Name of the Vulnerable Software and Affected Versions: John Weissberg Print Science Designer versions 1.3.155 and earlier Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows for Path Traversal, which can...

7.5CVSS7.8AI score0.00747EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/04/11 12:00 a.m.•10 views

WordPress plugin Print Science Designer 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

7.5CVSS7.8AI score0.00747EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/11 12:00 a.m.•15 views

WordPress plugin Neon Product Designer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9.1AI score0.00536EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/11 12:00 a.m.•3 views

CVE-2025-32671: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John Weissberg Print Science Designer print-science-designer allows Path Traversal.This issue affects Print Science Designer: from n/a through = 1.3.155...

7.5CVSS5.8AI score0.00747EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/11 12:00 a.m.•7 views

CVE-2025-32565: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

9.3CVSS5.8AI score0.00536EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/09 5:15 p.m.•43 views

CVE-2025-32677

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in solwininfotech WP Social Stream Designer social-stream-design allows Blind SQL Injection.This issue affects WP Social Stream Designer: from n/a through = 1.3...

7.6CVSS0.00513EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/09 4:09 p.m.•28 views

CVE-2025-32677 WordPress WP Social Stream Designer plugin <= 1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in solwininfotech WP Social Stream Designer social-stream-design allows Blind SQL Injection.This issue affects WP Social Stream Designer: from n/a through = 1.3...

7.6CVSS0.00513EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 4:09 p.m.•77 views

CVE-2025-32677

CVE-2025-32677 refers to an SQL Injection vulnerability in the WordPress plugin WP Social Stream Designer. The issue arises from improper neutralization of input in an SQL command, enabling a Blind SQL Injection. Affected are WP Social Stream Designer versions at or below 1.3 (per initial record ...

7.6CVSS7.3AI score0.00513EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•17 views

PT-2025-15821 · WordPress · Wp Social Stream Designer

Name of the Vulnerable Software and Affected Versions: WP Social Stream Designer versions 1.3 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection,...

7.6CVSS8.2AI score0.00513EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/09 12:00 a.m.•17 views

WordPress plugin WP Social Stream Designer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

7.6CVSS8.3AI score0.00513EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•5 views

CVE-2025-32677: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in solwininfotech WP Social Stream Designer social-stream-design allows Blind SQL Injection.This issue affects WP Social Stream Designer: from n/a through = 1.3...

7.6CVSS5.8AI score0.00513EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/07 12:00 a.m.•20 views

PT-2025-15304 · Google · Google Web Designer

Name of the Vulnerable Software and Affected Versions: Google Web Designer affected versions not specified Description: The software is susceptible to remote code execution RCE on macOS and Linux systems due to improper symbolic link resolution within the preview feature. This allows for potentia...

7.8CVSS6.9AI score0.00157EPSS
SaveExploits1References11
Rows per page
Query Builder