Lucene search
K

115 matches found

NVD
NVD
added 2025/10/27 2:15 a.m.9 views

CVE-2025-62967

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through = 3.6.25...

6.5CVSS0.00151EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.9 views

CVE-2025-62967 WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through = 3.6.25...

6.5CVSS0.00151EPSS
Exploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.16 views

CVE-2025-62967

CVE-2025-62967 — WordPress Plugin DirectoryPress (

6.5CVSS5.9AI score0.00151EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.3 views

CVE-2025-62967 WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through = 3.6.25...

6.5CVSS5.9AI score0.00151EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.4 views

PT-2025-43839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through = 3.6.25...

6.5CVSS6.4AI score0.00151EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.2 views

WordPress plugin DirectoryPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6AI score0.00151EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/18 2:10 a.m.5 views

WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin DirectoryPress versions = 3.6.25...

6.5CVSS6.1AI score0.00151EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-37600

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00656EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-33512

Malicious code in bioql PyPI...

5.4CVSS8.7AI score0.00287EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-41794

Malicious code in bioql PyPI...

9.8CVSS8.4AI score0.0057EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-9796

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00205EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-4884

Malicious code in bioql PyPI...

4.3CVSS8.7AI score0.00154EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-30369

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00374EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-43813

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.0031EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:18 a.m.5 views

CVE-2024-10584

The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

5.4CVSS6AI score0.00287EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:44 a.m.8 views

CVE-2023-37967

Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through 3.6.2...

9.8CVSS8AI score0.0057EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/06 5:20 p.m.13 views

CVE-2025-32249

Cross-Site Request Forgery CSRF vulnerability in Designinvento DirectoryPress directorypress allows Cross Site Request Forgery.This issue affects DirectoryPress: from n/a through = 3.6.22...

5.4CVSS5.9AI score0.00205EPSS
Exploits0References1
NVD
NVD
added 2025/04/04 4:15 p.m.5 views

CVE-2025-32249

Cross-Site Request Forgery CSRF vulnerability in Designinvento DirectoryPress directorypress allows Cross Site Request Forgery.This issue affects DirectoryPress: from n/a through = 3.6.22...

5.4CVSS0.00205EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/04 3:59 p.m.12 views

CVE-2025-32249 WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Designinvento DirectoryPress directorypress allows Cross Site Request Forgery.This issue affects DirectoryPress: from n/a through = 3.6.22...

5.4CVSS0.00205EPSS
Exploits0References1
CVE
CVE
added 2025/04/04 3:59 p.m.50 views

CVE-2025-32249

CVE-2025-32249 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress DirectoryPress plugin, affecting versions up to 3.6.19 (per multiple sources). The CVE entry notes a CSRF issue; the NVD entry lists a CVSS v3.1 base score of 5.4 (Medium) with network attack vector, low integrit...

5.4CVSS5.9AI score0.00205EPSS
Exploits0References1
Rows per page
Query Builder