Lucene search
+L

54 matches found

RedhatCVE
RedhatCVE
•added 2025/07/06 9:07 a.m.•26 views

CVE-2025-30983

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Card flip image slideshow card-flip-image-slideshow allows DOM-Based XSS.This issue affects Card flip image slideshow: from n/a through = 1.5...

6.5CVSS5.9AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/04 9:15 a.m.•22 views

CVE-2025-30983

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Card flip image slideshow card-flip-image-slideshow allows DOM-Based XSS.This issue affects Card flip image slideshow: from n/a through = 1.5...

6.5CVSS0.00187EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/07/04 9:15 a.m.•6 views

CVE-2025-30947

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a through = 10.1...

8.5CVSS5.9AI score0.00295EPSS
SaveExploits0References3
NVD
NVD
•added 2025/07/04 9:15 a.m.•13 views

CVE-2025-30969

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery: from n/a through = 9.0...

8.5CVSS0.00295EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/04 9:15 a.m.•16 views

CVE-2025-30947

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a through = 10.1...

8.5CVSS0.00295EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/04 9:15 a.m.•20 views

CVE-2025-30979

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects Pixelating image slideshow gallery: from n/a through = 8.0...

8.5CVSS0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/04 8:42 a.m.•59 views

CVE-2025-30983

CVE-2025-30983 affects the gopiplus Card flip image slideshow (WordPress plugin) with versions 1.5 and earlier. The vulnerability is DOM-based XSS caused by improper input neutralization during web page generation. Public sources indicate the issue exists and is currently unpatched; no confirmed ...

6.5CVSS5.9AI score0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/04 8:42 a.m.•7 views

CVE-2025-30979 WordPress Pixelating image slideshow gallery plugin <= 8.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects Pixelating image slideshow gallery: from n/a through = 8.0...

8.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/04 8:42 a.m.•39 views

CVE-2025-30979

CVE-2025-30979 affects the WordPress plugin gopiplus Pixelating image slideshow gallery (versions n/a–8.0). The root cause is improper neutralization of special elements in SQL commands, yielding an SQL Injection vulnerability. Impact is high: potential exposure of data and data integrity risk; C...

8.5CVSS5.9AI score0.00295EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/04 8:42 a.m.•22 views

CVE-2025-30969 WordPress iFrame Images Gallery plugin <= 9.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery: from n/a through = 9.0...

8.5CVSS0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/04 8:42 a.m.•40 views

CVE-2025-30969

CVE-2025-30969 affects the WordPress plugin iFrame Images Gallery (versions

8.5CVSS5.9AI score0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/04 8:42 a.m.•4 views

CVE-2025-30969 WordPress iFrame Images Gallery plugin <= 9.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery: from n/a through = 9.0...

8.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/04 8:42 a.m.•5 views

CVE-2025-30947 WordPress Cool fade popup plugin <= 10.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a through = 10.1...

8.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/04 8:42 a.m.•35 views

CVE-2025-30947

CVE-2025-30947 is a SQL Injection vulnerability in the WordPress plugin Cool fade popup (gopiplus) up to version 10.1 . The issue arises from improper neutralization of special elements in SQL commands, enabling a blind SQL injection. Public references indicate the affected plugin versions are

8.5CVSS5.9AI score0.00295EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/04 12:00 a.m.•13 views

PT-2025-27887 · Unknown · Gopiplus Cool Fade Popup

Name of the Vulnerable Software and Affected Versions: gopiplus Cool fade popup versions prior to 10.1 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL Injection', which allows Blind SQL Injection. Recommendations: For...

8.5CVSS7.1AI score0.00295EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•2 views

CVE-2025-30969: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery: from n/a through = 9.0...

8.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•2 views

CVE-2025-30947: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a through = 10.1...

8.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•4 views

CVE-2025-30983: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Card flip image slideshow card-flip-image-slideshow allows DOM-Based XSS.This issue affects Card flip image slideshow: from n/a through = 1.5...

6.5CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/04 12:00 a.m.•18 views

PT-2025-27888 · Unknown · Gopiplus Iframe Images Gallery

Name of the Vulnerable Software and Affected Versions: gopiplus iFrame Images Gallery versions prior to 9.0 Description: The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This is a problem where an attacker can inject...

8.5CVSS7.4AI score0.00295EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/07/04 12:00 a.m.•31 views

PT-2025-27890 · Unknown · Gopiplus Card Flip Image Slideshow

Name of the Vulnerable Software and Affected Versions: gopiplus Card flip image slideshow versions 1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker cou...

6.5CVSS5.4AI score0.00187EPSS
SaveExploits0References3
Rows per page
Query Builder