Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:29 a.m.1 views

CVE-2023-50824

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brian Batt Insert or Embed Articulate Content into WordPress allows Stored XSS.This issue affects Insert or Embed Articulate Content into WordPress: from n/a through 4.3000000021...

6.5CVSS6.7AI score0.00155EPSS
Exploits0References1
OSV
OSV
added 2025/10/04 12:11 a.m.4 views

RLSA-2025:10072 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet CVE-2025-6424 firefox:...

7.5CVSS6.1AI score0.01103EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-24998

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00105EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/17 8:29 a.m.4 views

CVE-2025-7507

The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it possible for authenticated attackers, with Contributor-lev...

6.4CVSS6.7AI score0.00105EPSS
Exploits0References1
NVD
NVD
added 2025/08/15 9:15 a.m.3 views

CVE-2025-7507

The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it possible for authenticated attackers, with Contributor-lev...

6.4CVSS0.00105EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/15 8:25 a.m.7 views

CVE-2025-7507 elink – Embed Content <= 1.1.0 - Authenticated (Contributor+) Insufficient Input Validation

The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it possible for authenticated attackers, with Contributor-lev...

6.4CVSS0.00105EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/15 8:25 a.m.2 views

CVE-2025-7507 elink – Embed Content <= 1.1.0 - Authenticated (Contributor+) Insufficient Input Validation

The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it possible for authenticated attackers, with Contributor-lev...

6.4CVSS6.6AI score0.00105EPSS
Exploits0References2
CVE
CVE
added 2025/08/15 8:25 a.m.18 views

CVE-2025-7507

CVE-2025-7507 concerns the WordPress plugin elink – Embed Content . Affected versions up to 1.1.0 are vulnerable to a malicious redirect due to insufficient input validation in the elink shortcode that allows unrestricted URLs. Exploitation requires an authenticated actor with at least Contributo...

6.4CVSS6.6AI score0.00105EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.2 views

PT-2025-33458 · WordPress · Elink – Embed Content

Name of the Vulnerable Software and Affected Versions: elink – Embed Content plugin for WordPress versions up to and including 1.1.0 Description: The elink – Embed Content plugin for WordPress is susceptible to malicious redirection due to insufficient restriction of URLs supplied through the eli...

6.4CVSS6.2AI score0.00105EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/08/15 12:0 a.m.1 views

WordPress plugin elink – Embed Content 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

6.4CVSS6.8AI score0.00105EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/07/15 7:41 a.m.1 views

WordPress Insert or Embed Articulate Content into WordPress plugin < 4.3000000024 - Author+ Arbitrary File Upload vulnerability

Author+ Arbitrary File Upload vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Insert or Embed Articulate Content into WordPress versions 4.3000000024...

8.8CVSS7AI score0.01106EPSS
Exploits1References1Affected Software1
Veracode
Veracode
added 2020/03/10 4:47 a.m.16 views

Server-Side Request Forgery (SSRF)

ghost is vulnerable to server-side request forgery SSRF. An attacker with the publisher role editor, author, contributor, administrator in a blog is able to exploit the vulnerability in the embed content module to make arbitrary GET requests in a on behalf of the server, allowing discovery of...

8.1CVSS3.4AI score0.00299EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2011/06/16 12:0 a.m.3 views

PT-2011-3455 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

4.3CVSS5.3AI score0.13887EPSS
Exploits1References5
Rows per page
Query Builder