Lucene search
+L

39 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:13 a.m.•16 views

CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

6.1CVSS6.3AI score0.00923EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:33 a.m.•15 views

CVE-2017-18572

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

6.1CVSS6.3AI score0.00915EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-9688

Malware in sbrugna...

6.1CVSS6.3AI score0.00915EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-10944

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00499EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-8170

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00374EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/17 1:32 p.m.•28 views

CVE-2025-30985

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...

9.8CVSS7.2AI score0.00499EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 12:15 p.m.•20 views

CVE-2025-30985

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...

9.8CVSS0.00499EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 11:59 a.m.•85 views

CVE-2025-30985

CVE-2025-30985 involves Deserialization of Untrusted Data in the GNUCommerce WordPress plugin, enabling PHP Object Injection. Affected: GNUCommerce versions n/a through 1.5.4. CVSSv3.1 base score 9.8 (CRITICAL). Exploitation status not provided in the connected documents; no remediation details a...

9.8CVSS7.2AI score0.00499EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 11:59 a.m.•49 views

CVE-2025-30985 WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...

9.8CVSS0.00499EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 11:59 a.m.•21 views

CVE-2025-30985 WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...

9.8CVSS7.3AI score0.00499EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•14 views

WordPress plugin GNUCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

9.8CVSS8.7AI score0.00499EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•2 views

PT-2025-16330

Name of the Vulnerable Software and Affected Versions GNUCommerce versions 1.5.4 and earlier Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a critical issue that affects GNUCommerce. Recommendations For versions 1.5.4 and earlier,...

9.8CVSS5.8AI score0.00499EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•1 views

CVE-2025-30985: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...

9.8CVSS5.8AI score0.00499EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/28 5:36 p.m.•16 views

CVE-2025-26564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...

7.1CVSS7.2AI score0.00374EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/26 3:16 p.m.•22 views

CVE-2025-26564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...

7.1CVSS0.00374EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/26 2:24 p.m.•68 views

CVE-2025-26564

CVE-2025-26564 affects the WordPress GNUCommerce plugin (versions

7.1CVSS7.2AI score0.00374EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/26 2:24 p.m.•9 views

CVE-2025-26564 WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...

7.1CVSS8.6AI score0.00374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•2 views

CVE-2025-26564: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...

7.1CVSS5.8AI score0.00374EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/26 12:00 a.m.•13 views

WordPress plugin GNUCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8.1AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•2 views

PT-2025-12920

Name of the Vulnerable Software and Affected Versions kagla GNUCommerce versions 1.5.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions 1.5.4 an...

7.1CVSS0.00374EPSS
SaveExploits0References4
Rows per page
Query Builder