Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.2 views

CVE-2025-49912

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through = 1.2.26...

5.9CVSS6AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.2 views

EUVD-2025-35543

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through = 1.2.26...

5.5AI score0.00027EPSS
Exploits0References2
NVD
NVD
added 2025/10/22 3:15 p.m.1 views

CVE-2025-49912

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through = 1.2.26...

5.9CVSS0.00027EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.1 views

CVE-2025-49912 WordPress Email Subscription Popup plugin <= 1.2.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through = 1.2.26...

5.9CVSS5.6AI score0.00027EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.6 views

CVE-2025-49912 WordPress Email Subscription Popup plugin <= 1.2.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through = 1.2.26...

5.9CVSS0.00027EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/22 5:8 a.m.2 views

WordPress Email Subscription Popup plugin <= 1.2.26 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Kim YunJi in WordPress Plugin Email Subscription Popup versions = 1.2.26...

5.9CVSS6.1AI score0.00027EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.1 views

WordPress plugin Nks Email Subscription Popup Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.7AI score0.00027EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.2 views

PT-2025-43179

Name of the Vulnerable Software and Affected Versions Nks Email Subscription Popup versions through 1.2.26 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scrip...

5.9CVSS5.9AI score0.00027EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-33753

Malicious code in bioql PyPI...

6.4CVSS8.6AI score0.0036EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-25134

Malicious code in bioql PyPI...

7.1CVSS8.6AI score0.00083EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-58784

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00373EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-34904

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00534EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-58758

Malicious code in bioql PyPI...

6.1CVSS7.1AI score0.0071EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:39 a.m.5 views

CVE-2024-11195

The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's printemailsubscribeform shortcode in all versions up to, and including, 1.2.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.0036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:33 a.m.11 views

CVE-2025-24587

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through = 1.2.23...

7.6CVSS7.4AI score0.11921EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:44 a.m.5 views

CVE-2024-27960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in I Thirteen Web Solution Email Subscription Popup allows Stored XSS.This issue affects Email Subscription Popup: from n/a through 1.2.20...

7.1CVSS8.6AI score0.00083EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/01/31 12:54 a.m.462 views

Exploit for CVE-2025-24587

CVE-2025-24587 1️⃣ Component type WordPress plugin 2️⃣ ...

7.6CVSS9.9AI score0.11921EPSS
Exploits1
NVD
NVD
added 2025/01/24 6:15 p.m.12 views

CVE-2025-24587

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through = 1.2.23...

7.6CVSS0.11921EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/01/24 5:27 p.m.2 views

CVE-2025-24587 WordPress Email Subscription Popup plugin <= 1.2.23 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through = 1.2.23...

7.6CVSS7.3AI score0.11921EPSS
Exploits1References1
CVE
CVE
added 2025/01/24 5:27 p.m.56 views

CVE-2025-24587

CVE-2025-24587 affects the WordPress plugin “Email Subscription Popup” up to version 1.2.23. Description confirms an SQL Injection : improper neutralization of special elements in SQL queries enabling blind SQL injection. Connected documents corroborate the plugin name and vulnerability class; Re...

7.6CVSS7.3AI score0.11921EPSS
Exploits1References1
Rows per page
Query Builder