Lucene search
+L

4331 matches found

CNNVD
CNNVD
added 2025/04/01 12:0 a.m.7 views

WordPress plugin Barcode Generator for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.3AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.10 views

PT-2025-14255 · Woocommerce · Barcode Generator For Woocommerce

Name of the Vulnerable Software and Affected Versions: Barcode Generator for WooCommerce versions 2.0.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

5.4CVSS9.3AI score0.00259EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.7 views

WordPress plugin MX Time Zone Clocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.5AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.5 views

WordPress plugin Fonts Manager | Custom Fonts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.8AI score0.00294EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/03/31 2:8 p.m.6 views

WordPress Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam in WordPress Plugin Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme versions = 1.1...

5.9CVSS6.1AI score0.00202EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.3 views

WordPress plugin Varnish WordPress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS8.3AI score0.00123EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/03/28 3:15 a.m.6 views

CVE-2025-24377

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...

7.8CVSS6AI score0.00519EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.4 views

Dell Unity 操作系统命令注入漏洞

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

7.8CVSS8AI score0.00519EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.6 views

Dell Unity 操作系统命令注入漏洞

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

7.8CVSS8AI score0.0055EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.8 views

InvoicePlane 安全漏洞

InvoicePlane is an application from InvoicePlane Open Source. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. A security vulnerability exists in InvoicePlane 1.6.11 and prior versions that originates from remote code execution...

9.8CVSS7.8AI score0.00632EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.9 views

Dell Unity 操作系统命令注入漏洞

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

7.8CVSS8AI score0.00537EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.6 views

WordPress plugin GetShop ecommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS8.8AI score0.00443EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.8 views

WordPress plugin RPS Include Content 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.8AI score0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.15 views

Dell Unity 操作系统命令注入漏洞

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

7.8CVSS8AI score0.00537EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/27 11:14 a.m.6 views

WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin WP ERP versions = 1.13.4...

5.4CVSS7AI score0.00344EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.9 views

Food Ordering Management System 安全漏洞

Food Ordering Management System is a food ordering management system by the individual developer Carlo Montero. It provides an online platform to order food from a restaurant or fast food chain. A security vulnerability exists in Food Ordering Management System version 1.0 and prior versions, whi...

5.8CVSS5.6AI score0.00376EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.4 views

WordPress plugin EAN for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS8.8AI score0.00247EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.4 views

WordPress plugin Disable Elementor Editor Translation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.8AI score0.00219EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.7 views

WordPress plugin Video & Photo Gallery for Ultimate Member 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

4.9CVSS8.8AI score0.00177EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/03/26 12:0 a.m.15 views

WordPress ScottCart 1.1 Remote Code Execution

WordPress ScottCart plugin versions 1.1 and below suffer from a remote code execution vulnerability...

9.8CVSS8.2AI score0.0135EPSS
SaveExploits1
Rows per page
Query Builder