Lucene search
+L

82624 matches found

NVD
NVD
added 2026/07/11 7:16 a.m.16 views

CVE-2026-11591

The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level...

4.4CVSS0.00397EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2026/07/11 5:35 a.m.46 views

CVE-2026-11591 Widgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' Parameters

The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level...

4.4CVSS0.00397EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2026/07/11 5:35 a.m.6 views

CVE-2026-11591

The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level...

4.4CVSS6.2AI score0.00397EPSS
SaveExploits0References11
CVE
CVE
added 2026/07/11 5:35 a.m.40 views

CVE-2026-11591

CVE-2026-11591 affects the WordPress plugin Widgets for Google Reviews up to version 13.3. It is a Stored Cross‑Site Scripting (XSS) vulnerability triggered via admin settings, caused by insufficient input sanitization and output escaping in the parameters fomo-title and fomo-text . Exploitation ...

4.4CVSS6.2AI score0.00397EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.19 views

PT-2026-57453

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.4AI score0.00738EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.33 views

PT-2026-57441

Name of the Vulnerable Software and Affected Versions Parse Server versions 9.0.0 through 9.10.0-alpha.1 Parse Server versions 8.x through 8.6.83 Description A stored cross-site scripting XSS issue exists when the software fails to recognize an uploaded file's extension via the mime package,...

2.1CVSS6AI score0.00415EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.20 views

PT-2026-57455

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.4AI score0.00738EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.23 views

PT-2026-57449

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.4AI score0.00738EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.18 views

PT-2026-57459

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.4AI score0.00738EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.14 views

PT-2026-57464

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.4AI score0.00738EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.29 views

PT-2026-57451

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.4AI score0.00738EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.22 views

PT-2026-57454

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.4AI score0.00738EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/11 12:00 a.m.18 views

PT-2026-57479

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.6AI score0.00738EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2026/07/10 8:30 a.m.14 views

WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Austin Ginder in WordPress Plugin WP Google Maps Pro versions = 10.1.02...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0Affected Software1
Chainguard
Chainguard
added 2026/07/10 8:24 a.m.38 views

GHSA-VQ3G-6QWH-5WJ2 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/10 8:24 a.m.34 views

CVE-2026-53269 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/10 8:24 a.m.36 views

GHSA-5G46-HMW3-W78X vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/10 8:24 a.m.36 views

GHSA-Q96W-JFJR-XWW5 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/10 8:24 a.m.41 views

GHSA-5QWX-4Q7J-HWM2 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/10 8:24 a.m.42 views

GHSA-7M9Q-85QJ-RC4G vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...

5.9AI score
SaveExploits0
Rows per page
Query Builder