Lucene search
+L

1119 matches found

CNVD
CNVD
•added 2025/10/15 12:00 a.m.•15 views

WordPress Betheme plugin cross-site scripting vulnerability

WordPress Betheme plugin is a WordPress multipurpose theme that is mainly used to quickly build different types of websites such as corporate, blog, e-commerce and so on. WordPress Betheme plugin suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and outp...

6.4CVSS6.2AI score0.00193EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/15 12:00 a.m.•18 views

WordPress plugin: URLYar URL Shortener – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site...

6.4CVSS5.5AI score0.00235EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•21 views

FreePBX Endpoint Manager: Operating System Command Injection Vulnerability

FreePBX Endpoint Manager is a centralized IP phone endpoint configuration module from the FreePBX open source. An operating system command injection vulnerability exists in FreePBX Endpoint Manager versions prior to 16.0.92 and prior to 17.0.6, which stems from insufficient user input cleanup, an...

8.6CVSS5.8AI score0.00528EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•24 views

WordPress plugin Stock History & Reports Manager for WooCommerce has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00239EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•16 views

WordPress Plugin Custom 404 Pro has a SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injectio...

4.9CVSS5.8AI score0.00296EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•26 views

WordPress Plugin Draft List: Cross-Site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00231EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•16 views

WordPress plugin Easy Plugin Stats has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

6.4CVSS5.5AI score0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•19 views

WordPress plugin Betheme has a cross-site scripting vulnerability

WordPress Betheme plugin is a WordPress multipurpose theme that is mainly used to quickly build different types of websites such as corporate, blog, e-commerce and so on. WordPress Betheme plugin suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and outp...

6.4CVSS6.2AI score0.00193EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•20 views

Framelink Figma MCP Server security vulnerabilities

Framelink Figma MCP Server is an MCP server from the individual developer Graham Lipsman. A security vulnerability exists in Framelink Figma MCP Server versions prior to 0.6.3 that stems from not properly cleaning up user input and could lead to the execution of arbitrary operating system command...

8CVSS8.2AI score0.05829EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/04 12:00 a.m.•16 views

WordPress plugin Contest Gallery – Upload, Vote & Sell with PayPal and Stripe Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

6.4CVSS5.5AI score0.00254EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/10/04 12:00 a.m.•25 views

WordPress plugin WP Photo Album Plus has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

5.4CVSS5.5AI score0.00215EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•18 views

WordPress plugin TableGen – Data Table Generator: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

4.4CVSS5.5AI score0.00241EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•17 views

WordPress Plugin: The Ultimate Multi-Design Video Carousel – Cross-site Script Vulnerability

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.5CVSS5.5AI score0.00216EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•22 views

WordPress plugin for event tickets, RSVPs, and calendar – cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00247EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•17 views

WordPress Plugin Generic Elements: Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00307EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•22 views

WordPress plugin Meks Easy Maps has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00247EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/01 12:00 a.m.•23 views

WordPress plugin ZoloBlocks has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.4CVSS5.5AI score0.00254EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/09/30 12:00 a.m.•23 views

WordPress plugin GutenBee has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00246EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/30 12:00 a.m.•19 views

Hospital Management System security vulnerabilities

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version 1.0, which stems from not properly cleaning up inputs and could lead to SQL injection attacks...

6.5CVSS5.7AI score0.00267EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/30 12:00 a.m.•22 views

WordPress plugin LatePoint has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00254EPSS
SaveExploits0References4
Rows per page
Query Builder