Lucene search
K

37 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:41 p.m.1 views

CVE-2023-25975

Cross-Site Request Forgery CSRF vulnerability in Frédéric Sheedy Etsy Shop plugin = 3.0.3 versions...

8.8CVSS8.5AI score0.00051EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-30408

Malicious code in bioql PyPI...

5.6CVSS6.4AI score0.00053EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-28210

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00229EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-57784

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00092EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-29862

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 6:34 a.m.9 views

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

5.6CVSS6.1AI score0.00053EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 10:25 p.m.6 views

WordPress Etsy Shop plugin < 3.0.7 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Etsy Shop versions 3.0.7...

5.6CVSS6.2AI score0.00053EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/09/22 6:15 a.m.2 views

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

5.6CVSS0.00053EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:0 a.m.17 views

CVE-2025-9115

CVE-2025-9115 affects the Etsy Shop WordPress plugin (versions older than 3.0.7). The issue is caused by not escaping the $_SERVER['REQUEST_URI'] value when outputting it into an attribute, enabling a reflected cross-site scripting (XSS) vulnerability in old browsers. The vulnerability is mitigat...

5.6CVSS5.7AI score0.00053EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:0 a.m.10 views

CVE-2025-9115 Etsy Shop < 3.0.7 - Reflected XSS via $_SERVER['REQUEST_URI']

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

0.00053EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:0 a.m.2 views

CVE-2025-9115 Etsy Shop < 3.0.7 - Reflected XSS via $_SERVER['REQUEST_URI']

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

5.7AI score0.00053EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-38689

Name of the Vulnerable Software and Affected Versions Etsy Shop WordPress plugin versions prior to 3.0.7 Description The plugin does not properly sanitize the $ SERVER'REQUEST URI' parameter before using it in an attribute, potentially allowing for Reflected Cross-Site Scripting in older web...

5.6CVSS5.9AI score0.00053EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.1 views

WordPress plugin Etsy Shop 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.6CVSS5.9AI score0.00053EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:43 a.m.2 views

CVE-2023-5470

The Etsy Shop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etsy-shop' shortcode in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS6.1AI score0.00092EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/19 4:54 p.m.6 views

WordPress Embed and Integrate Etsy Shop plugin <= 1.0.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ch4r0n in WordPress Plugin Embed and Integrate Etsy Shop versions = 1.0.8...

5.3CVSS5.3AI score0.00229EPSS
Exploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/05/19 3:15 p.m.5 views

CVE-2025-48346

Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embed and Integrate Etsy Shop: from n/a through = 1.0.8...

5.3CVSS5.2AI score0.00229EPSS
Exploits0References3
NVD
NVD
added 2025/05/19 3:15 p.m.11 views

CVE-2025-48346

Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embed and Integrate Etsy Shop: from n/a through = 1.0.8...

5.3CVSS0.00229EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/19 2:55 p.m.15 views

CVE-2025-48346 WordPress Embed and Integrate Etsy Shop plugin <= 1.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embed and Integrate Etsy Shop: from n/a through = 1.0.8...

5.3CVSS0.00229EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 2:55 p.m.6 views

CVE-2025-48346 WordPress Embed and Integrate Etsy Shop <= 1.0.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Etsy360 Embed and Integrate Etsy Shop allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Embed and Integrate Etsy Shop: from n/a through 1.0.4...

5.3CVSS5.3AI score0.00229EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.3 views

WordPress plugin Embed and Integrate Etsy Shop 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

5.3CVSS5.4AI score0.00229EPSS
Exploits0References1
Rows per page
Query Builder