Lucene search
+L

6982 matches found

Vulnrichment
Vulnrichment
•added 2025/12/30 10:47 a.m.•9 views

CVE-2025-68995 WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...

4.3CVSS6AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/30 10:47 a.m.•56 views

CVE-2025-68995 WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...

4.3CVSS0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•14 views

WordPress plugin My Sticky Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•4 views

CVE-2025-68995: Missing Authorization

Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.3.3...

4.3CVSS5.9AI score0.00285EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/27 12:00 a.m.•16 views

PT-2025-53897

Name of the Vulnerable Software and Affected Versions averta Shortcodes and extra features for Phlox theme auxin-elements versions through 2.17.12 Description An authorization issue exists in averta Shortcodes and extra features for Phlox theme auxin-elements, allowing exploitation due to...

4.3CVSS5.8AI score0.00225EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•18 views

CVE-2025-68574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...

5.9CVSS6.4AI score0.0021EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/25 4:54 a.m.•19 views

WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin My Sticky Elements versions = 2.3.3...

4.3CVSS7AI score0.00285EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/25 12:00 a.m.•22 views

PT-2025-53884

Name of the Vulnerable Software and Affected Versions My Sticky Elements versions prior to 2.3.3 Description The software contains a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations Update My Sticky Elements to a version...

4.3CVSS6.5AI score0.00285EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•18 views

EUVD-2025-205261

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...

6.1CVSS5.9AI score0.0021EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/24 1:10 p.m.•10 views

CVE-2025-68574 WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...

5.9CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•48 views

CVE-2025-68574 WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...

5.9CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 1:10 p.m.•57 views

CVE-2025-68574

CVE-2025-68574 affects Innovs WPBakery Visual Composer WHMCS Elements (void-visual-whmcs-element) and is linked to versions

5.9CVSS5.8AI score0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/24 11:37 a.m.•13 views

CVE-2025-68560

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CodexThemes TheGem Theme Elements for Elementor thegem-elements-elementor.This issue affects TheGem Theme Elements for Elementor: from n/a through = 5.10.5.1...

7.5CVSS5.9AI score0.00379EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/24 11:37 a.m.•16 views

CVE-2025-68559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Theme Elements for Elementor thegem-elements-elementor.This issue affects TheGem Theme Elements for Elementor: from n/a through = 5.10.5.1...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/12/24 11:16 a.m.•12 views

CVE-2025-68731

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix an integer overflow in aie2queryctxstatusarray The unpublished smatch static checker reported a warning. drivers/accel/amdxdna/aie2pci.c:904 aie2queryctxstatusarray warn: potential user controlled sizeof overfl...

6.6AI score0.0018EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/24 12:24 a.m.•8 views

SUSE CVE-2025-66400

mdast-util-to-hast is an mdast utility to transform to hast. From 13.0.0 to before 13.2.1, multiple unprefixed classnames could be added in markdown source by using character references. This could make rendered user supplied markdown code elements appear like the rest of the page. This...

6.9CVSS5.7AI score0.00305EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•31 views

PT-2025-53262

Name of the Vulnerable Software and Affected Versions WPBakery Visual Composer WHMCS Elements versions through 1.0.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the...

6.1CVSS6.4AI score0.0021EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•7 views

CVE-2025-68574: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...

5.9CVSS5.8AI score0.0021EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/24 12:00 a.m.•17 views

The vulnerability of the IBM InfoSphere Information Server software platform, related to the failure to take measures to neutralize specific elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the IBM InfoSphere Information Server software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6AI score0.00447EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•17 views

PT-2025-52924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the aie2 query ctx status array function within the amdxdna component of the Linux kernel. The issue was identified by a static checker and involves a...

7.1CVSS6.7AI score0.00693EPSS
SaveExploits1References210
Rows per page
Query Builder