Lucene search
+L

15557 matches found

CNNVD
CNNVD
added 2026/03/21 12:00 a.m.15 views

WordPress plugin Vagaro Booking Widget 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.2CVSS5.7AI score0.00287EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.36 views

WordPress plugin Injection Guard 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.2CVSS5.7AI score0.00321EPSS
SaveExploits0References18
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.15 views

WordPress plugin Ed s Social Share 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00193EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.15 views

WordPress plugin Schema Shortcode 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00156EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/21 12:00 a.m.14 views

PT-2026-26811

The login register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0. This is due to missing nonce validation on the settings page and insufficient input sanitization and output escaping on the 'login regist...

4.3CVSS6AI score0.00145EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/21 12:00 a.m.19 views

PT-2026-26875

The WP Random Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cat', 'nocat', and 'text' shortcode attributes of the 'wp random button' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on...

6.4CVSS6AI score0.00193EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.16 views

WordPress plugin Ricerca 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.4CVSS5.7AI score0.00154EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/21 12:00 a.m.11 views

PT-2026-26874

The fyyd podcast shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fyyd-podcast', 'fyyd-episode', and 'fyyd' shortcodes in all versions up to, and including, 0.3.1. This is due to insufficient input sanitization and output escaping on user-supplied shortcode...

6.4CVSS6AI score0.0025EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.14 views

WordPress plugin Show Posts list 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.8AI score0.00235EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.13 views

WordPress plugin Go Night Pro | WordPress Dark Mode Plugin 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00243EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.14 views

WordPress plugin Contact List 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.6AI score0.00272EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.15 views

WordPress plugin Sherk Custom Post Type Displays 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00204EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.14 views

WordPress plugin Survey 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.4CVSS5.8AI score0.00245EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.14 views

WordPress plugin CMS Commander SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

8.8CVSS5.9AI score0.00341EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.24 views

WordPress plugin Multi Post Carousel by Category 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00235EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.13 views

WordPress plugin Outgrow 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00243EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.15 views

WordPress plugin WP-WebAuthn 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.1CVSS5.8AI score0.00265EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.13 views

WordPress plugin rexCrawler 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.1CVSS5.7AI score0.00265EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/21 12:00 a.m.10 views

PT-2026-26836

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'day from' and 'day to' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6AI score0.00256EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.25 views

WordPress plugin Quentn WP SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPress...

7.5CVSS5.9AI score0.00364EPSS
SaveExploits0References3
Rows per page
Query Builder