Lucene search
+L

301 matches found

Kitploit
Kitploit
•added 2026/09/28 6:21 a.m.•56 views

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

5.9AI score
SaveExploits0References17
Kitploit
Kitploit
•added 2026/09/27 11:08 p.m.•28 views

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

5.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/09/25 9:00 p.m.•26 views

CVE-2026-100381 UploadWizard Flickr collection and set titles allow DOM XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - UploadWizard Extension: from before 1.46.1, 1.45.5, 1.43.10...

5.3CVSS0.0033EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/27 3:17 p.m.•23 views

CVE-2026-66434

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/27 1:59 p.m.•19 views

EUVD-2026-49243

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/27 1:59 p.m.•31 views

CVE-2026-66434

Photonic Gallery & Lightbox for Flickr, SmugMug & Others WordPress plugin ≤ 3.33 is affected by a Cross Site Scripting (XSS) vulnerability. CVSSv3.1 base score 6.5 (MEDIUM) with network access, low privileges, user interaction required. Root cause and remediation details are not provided in the d...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/27 1:59 p.m.•13 views

CVE-2026-66434

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/27 1:59 p.m.•37 views

CVE-2026-66434 WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/07/27 9:11 a.m.•12 views

WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Photonic Gallery & Lightbox for Flickr, SmugMug & Others versions = 3.33...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•1 views

CVE-2026-66434: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•15 views

PT-2026-64963

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:34 p.m.•22 views

CVE-2026-9048

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS5.5AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•29 views

EUVD-2026-33851

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/02 12:16 a.m.•30 views

CVE-2026-9048

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS0.00281EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•1 views

CVE-2026-9048: Incorrect Authorization

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/01 11:28 p.m.•55 views

CVE-2026-9048 Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS0.00281EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/01 11:28 p.m.•53 views

CVE-2026-9048

The Slider Revolution WordPress plugin is affected (versions 7.0.0–7.0.14). The vulnerability arises in the slider.get.full AJAX action, enabling authenticated attackers with Contributor-level access and higher to expose sensitive data stored in slider settings. Exposed data includes raw social m...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/01 11:28 p.m.•17 views

CVE-2026-9048

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/01 11:28 p.m.•21 views

CVE-2026-9048 Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•33 views

PT-2026-45666

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References3
Rows per page
Query Builder