Lucene search
+L

8789 matches found

Cvelist
Cvelist
•added 2025/04/01 2:51 p.m.•71 views

CVE-2025-31850 WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder pdf-generator-addon-for-elementor-page-builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder:...

6.5CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 2:51 p.m.•71 views

CVE-2025-31850

CVE-2025-31850 : Stored Cross-Site Scripting in PDF Generator Addon for Elementor Page Builder. Affected: PDF Generator Addon for Elementor Page Builder (versions up to 1.7.5; “from n/a through 1.7.5”). Cause: Improper input neutralization during web page generation. Impact: Cross-site script exe...

6.5CVSS8.4AI score0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 2:51 p.m.•15 views

CVE-2025-31850 WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder allows Stored XSS. This issue affects PDF Generator Addon for Elementor Page Builder: from n/a through 1.7.5...

6.5CVSS8.4AI score0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 2:51 p.m.•6 views

CVE-2025-31791 WordPress Pin Generator Plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Oliver Boyers Pin Generator pin-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pin Generator: from n/a through = 2.0.0...

5.4CVSS8.6AI score0.00455EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 6:15 a.m.•41 views

CVE-2025-30917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Wham SKU Generator for WooCommerce sku-for-woocommerce allows Reflected XSS.This issue affects SKU Generator for WooCommerce: from n/a through = 1.6.2...

7.1CVSS0.00317EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/04/01 6:15 a.m.•13 views

CVE-2025-30917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Wham SKU Generator for WooCommerce sku-for-woocommerce allows Reflected XSS.This issue affects SKU Generator for WooCommerce: from n/a through = 1.6.2...

7.1CVSS7.2AI score0.00317EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/01 5:31 a.m.•81 views

CVE-2025-30917

CVE-2025-30917 is a reflected XSS vulnerability in the SKU Generator for WooCommerce (WP Wham SKU Generator for WooCommerce). The issue arises from improper neutralization of input during web page generation, enabling a reflected cross-site scripting payload. Affected versions are from n/a up to ...

7.1CVSS8.4AI score0.00317EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 5:31 a.m.•41 views

CVE-2025-30917 WordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Wham SKU Generator for WooCommerce sku-for-woocommerce allows Reflected XSS.This issue affects SKU Generator for WooCommerce: from n/a through = 1.6.2...

7.1CVSS0.00317EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/01 12:15 a.m.•18 views

CVE-2025-3041

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploi...

9.8CVSS6.2AI score0.00487EPSS
SaveExploits1References4
CVE
CVE
•added 2025/04/01 12:00 a.m.•79 views

CVE-2025-3042

CVE-2025-3042 affects Project Worlds Online Time Table Generator 1.0. The vulnerability resides in /student/updateprofile.php where manipulating the pic parameter enables unrestricted file upload, with a remote attack possible and public disclosure of the exploit. Multiple sources corroborate the...

9.8CVSS6.2AI score0.00487EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/04/01 12:00 a.m.•45 views

CVE-2025-3042 Project Worlds Online Time Table Generator updateprofile.php unrestricted upload

A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit...

6.5CVSS0.00487EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•7 views

CVE-2025-31791: Missing Authorization

Missing Authorization vulnerability in Oliver Boyers Pin Generator pin-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pin Generator: from n/a through = 2.0.0...

5.4CVSS8.7AI score0.00455EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•12 views

WordPress plugin Pin Generator has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS8.3AI score0.00455EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•15 views

PT-2025-14176 · Unknown · Oliver Boyers Pin Generator

Name of the Vulnerable Software and Affected Versions: Oliver Boyers Pin Generator versions through 2.0.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions...

5.4CVSS9.5AI score0.00455EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•23 views

PT-2025-14254 · Unknown · Upc/Ean/Gtin Code Generator

Name of the Vulnerable Software and Affected Versions: UPC/EAN/GTIN Code Generator versions through 2.0.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions throug...

5.4CVSS9.5AI score0.00281EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•11 views

CVE-2025-31878: Missing Authorization

Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPC/EAN/GTIN Code Generator: from n/a through = 2.0.2...

5.4CVSS8.7AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•30 views

PT-2025-14255 · Woocommerce · Barcode Generator For Woocommerce

Name of the Vulnerable Software and Affected Versions: Barcode Generator for WooCommerce versions 2.0.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

5.4CVSS9.3AI score0.00281EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•23 views

WordPress plugin Barcode Generator for WooCommerce has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.3AI score0.00281EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•7 views

CVE-2025-31879: Missing Authorization

Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Barcode Generator for WooCommerce: from n/a through ...

5.4CVSS8.7AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•20 views

PT-2025-14069 · WordPress · Wp Wham Sku Generator For Woocommerce

Name of the Vulnerable Software and Affected Versions: WP Wham SKU Generator for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables...

7.1CVSS9AI score0.00317EPSS
SaveExploits0References5
Rows per page
Query Builder