Lucene search
+L

1119 matches found

CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•18 views

WordPress plugin Todays Date Inserter Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS5.4AI score0.00169EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•9 views

WordPress plugin Parallax Scrolling Enllax.js has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS5.5AI score0.00209EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/04 12:00 a.m.•18 views

Promptcraft Forge Studio security vulnerabilities

Promptcraft Forge Studio is a developer toolkit for Marcelo Tessaro Individual Developer. A security vulnerability exists in Promptcraft Forge Studio that stems from improperly cleaning up user input using a regular expression blacklist, which could lead to the execution of a malicious payload...

8.2CVSS5.8AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•14 views

WordPress plugin Orbit Fox by ThemeIsle has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS5.5AI score0.00209EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•11 views

WordPress plugin UsersWP cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.2AI score0.00237EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•15 views

WordPress plugin Unlimited Elements For Elementor: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS5.3AI score0.00237EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•17 views

ShengQiao Technology St. Joe ERP System security vulnerability

ShengQiao Technology St. Joe ERP System is an enterprise management software from ShengQiao Technology China. A security vulnerability exists in ShengQiao Technology St. Joe ERP System that stems from insufficient input cleanup and could lead to a SQL injection attack...

9.8CVSS5.8AI score0.03106EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•13 views

WordPress plugin WP Talroo has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.1CVSS5.5AI score0.00253EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/08/21 12:00 a.m.•26 views

WordPress plugin SlingBlocks has cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00203EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/08/20 12:00 a.m.•16 views

WordPress Anber Elementor Addon plugin cross-site scripting vulnerability

WordPress Anber Elementor Addon plugin is an Elementor plugin extension for WordPress, designed to provide more customization for website design. WordPress Anber Elementor Addon plugin suffers from a cross-site scripting vulnerability that stems from insufficient parameter input cleanup, which ca...

6.4CVSS6.2AI score0.00247EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•21 views

Spree Commerce security vulnerabilities

Spree Commerce is an e-commerce platform from Spree Open Source. A security vulnerability exists in Spree Commerce versions prior to 0.50.x. The vulnerability stems from improper input cleanup in the API search function and could lead to remote command execution...

9.8CVSS6AI score0.03756EPSS
SaveExploits2References7
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•16 views

WordPress plugin Nexter Blocks has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00253EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/16 12:00 a.m.•13 views

WordPress plugin Intl DateTime Calendar has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.4CVSS5.5AI score0.00247EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/16 12:00 a.m.•18 views

WordPress plugin Anber Elementor Addon has a cross-site scripting vulnerability

WordPress Anber Elementor Addon plugin is an Elementor plugin extension for WordPress, designed to provide more customization for website design. WordPress Anber Elementor Addon plugin suffers from a cross-site scripting vulnerability that stems from insufficient parameter input cleanup, which ca...

6.4CVSS6.1AI score0.00247EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/15 12:00 a.m.•18 views

WordPress plugin: Plugin README Parser – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS5.5AI score0.00253EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/15 12:00 a.m.•21 views

WordPress plugin Essential Addons for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS5.5AI score0.00253EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•27 views

WordPress plugin WPBITS Addons for Elementor Page Builder: Multiple products have cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS5.5AI score0.00174EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/08/12 12:00 a.m.•15 views

WordPress esri-map-view cross-site scripting vulnerability

WordPress esri-map-view is used to embed Esri/ArcGIS maps or scenes in websites. The plugin realizes map display through short code, supports selecting base map, setting initial view angle, adding custom layers, pop-up information window and other functions, and can embed preconfigured web maps o...

6.4CVSS6AI score0.0024EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/12 12:00 a.m.•17 views

WordPress Flex Guten Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Flex Guten, which stems from insufficient input cleanup and escaping, and can be exploited by an attacke...

6.4CVSS6.2AI score0.0032EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/12 12:00 a.m.•23 views

WordPress Element Pack Elementor Addons and Templates Cross-Site Scripting Vulnerability

WordPress Element Pack Elementor Addons and Templates is a powerful plugin for Elementor designed to simplify website design. A cross-site scripting vulnerability exists in WordPress Element Pack Elementor Addons and Templates, which stems from insufficient input cleanup and output escaping of th...

5.4CVSS5.2AI score0.05503EPSS
SaveExploits0References1
Rows per page
Query Builder