Lucene search
+L

281 matches found

Cvelist
Cvelist
•added 2025/09/05 4:15 p.m.•25 views

CVE-2025-48103 WordPress Today's Date Inserter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

6.5CVSS0.00169EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/05 4:15 p.m.•30 views

CVE-2025-48103

CVE-2025-48103 is a stored XSS in the WordPress plugin Today's Date Inserter (versions

6.5CVSS5.2AI score0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/05 4:15 p.m.•6 views

CVE-2025-48103 WordPress Today's Date Inserter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•17 views

WordPress plugin Todays Date Inserter Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS5.4AI score0.00169EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•20 views

PT-2025-36243

Name of the Vulnerable Software and Affected Versions: mulscully Today's Date Inserter versions through 1.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Today's...

6.5CVSS5.5AI score0.00169EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•1 views

CVE-2025-48103: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/02 10:15 a.m.•13 views

WordPress Today's Date Inserter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Todays Date Inserter versions = 1.2.1...

6.5CVSS6AI score0.00169EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:37 a.m.•19 views

CVE-2024-2073

A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This vulnerability affects unknown code of the file viewpost.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

8.8CVSS7.6AI score0.00692EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:57 a.m.•16 views

CVE-2023-4668

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins present and active, active theme,...

7.5CVSS5.9AI score0.00598EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:00 a.m.•12 views

CVE-2023-1549

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

7.2CVSS8.8AI score0.16903EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:17 p.m.•14 views

CVE-2022-0901

The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUESTURI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters...

6.1CVSS6.2AI score0.03596EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:15 p.m.•9 views

CVE-2022-0288

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the htmlelementselection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.02061EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:58 a.m.•16 views

CVE-2015-9497

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...

8.8CVSS6.2AI score0.0098EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/03/14 10:19 p.m.•14 views

WordPress Ad Inserter plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Andres Roldan in WordPress Plugin Ad Inserter versions = 2.8.0...

5.1CVSS7.8AI score0.00403EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/08 6:07 a.m.•18 views

CVE-2025-22623

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS6.8AI score0.00403EPSS
SaveExploits0References4
NVD
NVD
•added 2025/03/06 5:15 a.m.•22 views

CVE-2025-22623

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS0.00403EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/06 5:08 a.m.•70 views

CVE-2025-22623

CVE-2025-22623 affects the WordPress plugin Ad Inserter – Ad Manager and AdSense Ads (version 2.8.0 and earlier). The vulnerability arises from the web application generating content without validating the origin of untrusted data in myapp/includes/dst/dst.php, enabling a reflected cross-site scr...

5.1CVSS7.1AI score0.00403EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/06 5:08 a.m.•15 views

CVE-2025-22623 Ad Inserter - Reflected cross-site scripting (XSS)

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS7.1AI score0.00403EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/06 5:08 a.m.•50 views

CVE-2025-22623 Ad Inserter - Reflected cross-site scripting (XSS)

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS0.00403EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/06 12:00 a.m.•29 views

WordPress plugin Ad Inserter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

5.1CVSS8.3AI score0.00403EPSS
SaveExploits0References3
Rows per page
Query Builder