Lucene search
+L

3158 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:18 p.m.6 views

Malicious code in @ag-grid-react/lib (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
NVD
NVD
added 2024/06/22 2:15 a.m.22 views

CVE-2024-2484

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

6.4CVSS0.00385EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/22 2:15 a.m.8 views

CVE-2024-2484

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

5.4CVSS5.9AI score0.00385EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/22 12:0 a.m.9 views

WordPress plugin Orbit Fox by ThemeIsle security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

6.4CVSS6.1AI score0.00385EPSS
SaveExploits0References6
NVD
NVD
added 2024/06/19 11:15 a.m.30 views

CVE-2023-47771

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...

8.3CVSS0.00356EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/19 10:37 a.m.41 views

CVE-2023-47771 WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...

8.3CVSS6.9AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/19 10:37 a.m.29 views

CVE-2023-47771 WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...

8.3CVSS0.00356EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/19 12:0 a.m.9 views

WordPress plugin Essential Grid security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.3CVSS6.8AI score0.00356EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/17 6:15 a.m.4 views

CVE-2024-4305

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Si...

6.8CVSS5.8AI score0.0043EPSS
SaveExploits2References1
CVE
CVE
added 2024/06/17 6:0 a.m.71 views

CVE-2024-4305

CVE-2024-4305 affects the WordPress plugin combination “Post Grid Gutenberg Blocks and WordPress Blog Plugin.” The description in the sources specifies that versions before 4.1.0 do not validate and escape certain block options before they are output in a page/post where the block is embedded, wh...

6.8CVSS6.2AI score0.0043EPSS
SaveExploits2References1Affected Software1
GithubExploit
GithubExploit
added 2024/06/14 7:12 a.m.410 views

Exploit for CVE-2024-5326

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and Wor...

8.8CVSS6.5AI score0.01426EPSS
SaveExploits1
OSV
OSV
added 2024/06/09 9:15 a.m.6 views

CVE-2024-31246

Missing Authorization vulnerability in Post Grid Team by WPXPO PostX – Gutenberg Blocks for Post Grid.This issue affects PostX – Gutenberg Blocks for Post Grid: from n/a through 3.2.3...

8.8CVSS5.8AI score0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/09 8:55 a.m.28 views

CVE-2024-31246 WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 3.2.3...

5.4CVSS0.00336EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/09 8:55 a.m.13 views

CVE-2024-31246 WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 3.2.3...

5.4CVSS7.2AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/09 8:55 a.m.60 views

CVE-2024-31246

CVE-2024-31246 is a Missing Authorization vulnerability in PostX – Gutenberg Blocks for Post Grid (Post Grid Team by WPXPO). Affected: PostX – Gutenberg Blocks for Post Grid, versions up to and including 3.2.3 (n/a–3.2.3). Root cause: missing authorization allows unauthorized access/modification ...

8.8CVSS7.2AI score0.00336EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/09 12:0 a.m.5 views

PT-2024-23888 · Wpxpo · Postx – Gutenberg Blocks For Post Grid

Name of the Vulnerable Software and Affected Versions: PostX – Gutenberg Blocks for Post Grid versions 3.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in Post Grid Team by WPXPO. This vulnerability affects PostX – Gutenberg Blocks for Post Grid...

8.8CVSS9.2AI score0.00336EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/08 1:15 p.m.3 views

CVE-2024-35739

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RadiusTheme The Post Grid allows Stored XSS.This issue affects The Post Grid: from n/a through 7.7.1...

5.4CVSS5.8AI score
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/08 12:42 p.m.35 views

CVE-2024-35739 WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.1...

6.5CVSS0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/08 7:15 a.m.21 views

CVE-2024-5758

Rejected reason: REJECT Duplicate of CVE-2024-4305. Please use CVE-2024-4305 instead...

SaveExploits1
CNNVD
CNNVD
added 2024/06/08 12:0 a.m.7 views

WordPress plugin The Post Grid cross-site scripting vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00279EPSS
SaveExploits0References2
Rows per page
Query Builder