Lucene search
+L

3694 matches found

Kitploit
Kitploit
•added 2026/10/02 7:59 a.m.•42 views

Grid-Mobile

Grid - Encrypted Location Sharing Be Hard to Track. mygrid.app Grid is a secure, end-to-end encrypted E2EE location sharing application integrated with the Matrix Protocol. Built using Flutter, Grid provides a privacy-focused solution for sharing your location with trusted contacts. Features...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/02 3:42 a.m.•22 views

RedGridLink

Red Grid Link Red Grid Link is retired Retired September 27, 2026. v1.7.0 is the final release. Link has been removed from sale on the App Store and unpublished on Google Play. New subscriptions and lifetime purchases are no longer offered. Existing installations: Retirement does not erase local...

6.1AI score
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/30 2:12 a.m.•28 views

Essential Grid <= 3.1.0 - Cross-Site Scripting

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability in ThemePunch OHG Essential Grid plugin = 3.1.0 versions. id: CVE-2023-47684 info: name: Essential Grid = 3.1.0 - Cross-Site Scripting author: 0xpugal severity: medium description: | Unauthenticated Reflected Cross-Site Scripting XS...

7.1CVSS7AI score0.00838EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/30 2:12 a.m.•29 views

Post Grid <= 2.2.50 - Information Exposure via REST API

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50. id: CVE-2023-40211 info: name: Post Grid = 2.2.50 - Information Exposure via REST API...

7.5CVSS7.5AI score0.0216EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/29 12:40 a.m.•5 views

phantom-grid

Phantom Grid - Enterprise Zero Trust Network Access ZTNA Phantom Grid is a next-generation Zero Trust Network Access ZTNA and active defense system. It operates at both the Kernel Level eBPF and Application Level mTLS to transform Linux servers into a robust, deceptive attack surface. Built for...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 7:44 p.m.•13 views

CVE-2022-28108

Selenium Chrome RCE Exploit Extended This repository contains a modified version of a Metasploit module that exploits a Remote Code Execution vulnerability in older versions of Selenium Server Grid. Please read this README carefully before using this code. Acknowledgment of Original Code: This...

9.3CVSS8AI score0.11727EPSS
SaveExploits6
NVD
NVD
•added 2026/09/25 8:16 a.m.•8 views

CVE-2026-92713

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

8.1CVSS0.00273EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/25 8:16 a.m.•8 views

CVE-2026-89406

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

7.5CVSS0.00394EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/25 7:40 a.m.•12 views

EUVD-2026-86602

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/25 7:40 a.m.•30 views

CVE-2026-92713 Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

8.1CVSS0.00273EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/25 7:40 a.m.•9 views

EUVD-2026-86592

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadimage function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with author-lev...

8.1CVSS5.9AI score0.00273EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/09/24 6:51 p.m.•10 views

WordPress Modula Image Gallery – Photo Grid & Video Gallery plugin <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure vulnerability

Missing Authorization to Unauthenticated Private Gallery Image Disclosure vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Modula Image Gallery versions = 3.0.1...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/24 6:17 a.m.•12 views

CVE-2026-84151

The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leadin...

3.5CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 6:00 a.m.•22 views

CVE-2026-84151

The Post Grid WordPress plugin versions prior to 7.9.5 is vulnerable to HTML injection due to an improper limitation of the WordPress allowed-HTML list. Specifically, the plugin fails to restrict the expansion of this list to its own markup, applying it site-wide. This allows users with the Contr...

3.5CVSS5.9AI score0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 6:00 a.m.•37 views

CVE-2026-84151 The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening

The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leadin...

0.00142EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•9 views

EUVD-2026-85800

The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leadin...

3.5CVSS5.9AI score0.00142EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/09/24 6:00 a.m.•19 views

WordPress The Post Grid plugin < 7.9.5 - Contributor+ Stored HTML/iframe Injection vulnerability

Contributor+ Stored HTML/iframe Injection vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin The Post Grid versions 7.9.5...

3.5CVSS5.8AI score0.00142EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/24 6:00 a.m.•8 views

CVE-2026-84151 The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening

The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leadin...

5.9AI score0.00142EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•6 views

CVE-2026-84151: Improper Neutralization of Input During Web Page Generation

The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leadin...

3.5CVSS5.9AI score0.00142EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•4 views

PT-2026-97711

Name of the Vulnerable Software and Affected Versions The Post Grid versions prior to 7.9.5 Description The plugin fails to limit the expansion of the WordPress allowed-HTML list to its own markup, applying the change site-wide. This allows users with the Contributor role and above to store ifram...

3.5CVSS5.7AI score0.00142EPSS
SaveExploits0References5
Rows per page
Query Builder