Lucene search
+L

19 matches found

NVD
NVD
•added 2026/06/26 3:16 p.m.•25 views

CVE-2026-57656

Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...

5.9CVSS0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/26 2:53 p.m.•59 views

CVE-2026-57656 WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...

5.9CVSS0.0024EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/26 2:53 p.m.•16 views

CVE-2026-57656

Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/26 2:53 p.m.•23 views

EUVD-2026-39771

Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/26 2:53 p.m.•19 views

CVE-2026-57656 WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/26 2:53 p.m.•38 views

CVE-2026-57656

The affected software is the WordPress plugin Hester Core (versions ≤ 1.1.8). The CVE-2026-57656 entry documents an Author Cross Site Scripting (XSS) vulnerability in Hester Core ≤ 1.1.8. Multiple connected sources (NVD, CVE List, EUVD, Patchstack) corroborate this issue. The provided documents d...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/06/26 1:17 p.m.•28 views

WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Hester Core versions = 1.1.8...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/26 12:00 a.m.•22 views

PT-2026-52826

Name of the Vulnerable Software and Affected Versions Hester Core versions prior to 1.1.9 Description The Hester Core plugin for WordPress contains a Stored Cross-Site Scripting XSS flaw. This occurs because the software fails to properly sanitize input and escape output. Authenticated attackers...

5.9CVSS6AI score0.0024EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/26 12:00 a.m.•9 views

CVE-2026-57656: Improper Neutralization of Input During Web Page Generation

Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...

5.9CVSS5.7AI score0.0024EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-8420

Malicious code in bioql PyPI...

6.5CVSS7.9AI score0.00227EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/29 2:28 p.m.•19 views

CVE-2025-26734

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in peregrinethemes Hester hester allows Stored XSS.This issue affects Hester: from n/a through = 1.1.10...

6.5CVSS8.6AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 2:15 p.m.•22 views

CVE-2025-26734

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in peregrinethemes Hester hester allows Stored XSS.This issue affects Hester: from n/a through = 1.1.10...

6.5CVSS0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/27 1:58 p.m.•7 views

CVE-2025-26734 WordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in peregrinethemes Hester hester allows Stored XSS.This issue affects Hester: from n/a through = 1.1.10...

6.5CVSS8.4AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 1:58 p.m.•79 views

CVE-2025-26734

CVE-2025-26734 concerns the WordPress theme Hester (by Hester) with a Stored XSS vulnerability in Hester versions up to 1.1.10 due to improper input neutralization during web page generation. The issue is authenticated (Contributor+) and affects Hester up to 1.1.10; Wordfence lists patch status a...

6.5CVSS8.4AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/27 1:58 p.m.•27 views

CVE-2025-26734 WordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in peregrinethemes Hester hester allows Stored XSS.This issue affects Hester: from n/a through = 1.1.10...

6.5CVSS0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•18 views

WordPress plugin Hester has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS7.8AI score0.00227EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•11 views

PT-2025-13190

Name of the Vulnerable Software and Affected Versions peregrinethemes Hester versions 1.1.10 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

6.5CVSS8.4AI score0.00227EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•10 views

CVE-2025-26734: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in peregrinethemes Hester hester allows Stored XSS.This issue affects Hester: from n/a through = 1.1.10...

6.5CVSS8.6AI score0.00227EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 6:17 p.m.•17 views

WordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Hester versions = 1.1.10...

6.5CVSS8.4AI score0.00227EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder