Lucene search
+L

6 matches found

CVE
CVE
added 2025/12/09 2:52 p.m.13 views

CVE-2025-62090

CVE-2025-62090 affects the WordPress plugin Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons (

6.5CVSS6.6AI score0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.6 views

WordPress plugin Gutenverse News 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS6.5AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/19 10:15 a.m.5 views

CVE-2025-5234

The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.00211EPSS
SaveExploits0References5
OSV
OSV
added 2025/06/19 10:15 a.m.8 views

CVE-2025-5234

The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

5.4CVSS5.9AI score0.00211EPSS
SaveExploits0References5
CVE
CVE
added 2025/06/19 9:23 a.m.26 views

CVE-2025-5234

CVE-2025-5234 affects the Gutenverse News WordPress plugin (versions up to 1.0.4). It is a Stored Cross-Site Scripting vulnerability via the elementId parameter, exploitable by authenticated attackers with Contributor-level access or higher. The payload can cause arbitrary scripts to run on pages...

6.4CVSS5.7AI score0.00211EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 2025/06/19 8:24 a.m.9 views

WordPress Gutenverse News plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via elementId Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons versions = 1.0.4...

6.4CVSS5.5AI score0.00211EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder