Lucene search
+L

27 matches found

NVD
NVD
•added 2026/10/12 9:16 a.m.•5 views

CVE-2026-107865

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5...

6.5CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/12 9:03 a.m.•5 views

CVE-2026-107865

The Crocoblock JetMenu plugin (versions through 3.0.5 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to the Improper Neutralization of Input During Web Page Generation . This vulnerability allows an attacker to store and execute malicious scripts in the context of the application...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/12 9:03 a.m.•9 views

CVE-2026-107865 WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5...

6.5CVSS0.00161EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/12 9:03 a.m.•6 views

EUVD-2026-97304

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-25318

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00368EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-11112

Malicious code in bioql PyPI...

7.5CVSS8.2AI score0.00447EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•10 views

CVE-2025-53987

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...

6.5CVSS5.9AI score0.00368EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 8:15 a.m.•11 views

CVE-2025-53987

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...

6.5CVSS0.00368EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/20 8:03 a.m.•3 views

CVE-2025-53987 WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...

6.5CVSS5.2AI score0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 8:03 a.m.•27 views

CVE-2025-53987 WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...

6.5CVSS0.00368EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/20 8:03 a.m.•44 views

CVE-2025-53987

CVE-2025-53987 is a WordPress JetMenu vulnerability affecting Crocoblock JetMenu versions up to and including 2.4.11.1, described as an insertion of sensitive information into sent data that can lead to retrieval of embedded sensitive data. According to the public details, the CVSSv3.1 base score...

6.5CVSS5.9AI score0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•13 views

WordPress plugin JetMenu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.5AI score0.00368EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•27 views

PT-2025-33992 · Crocoblock · Jetmenu

Name of the Vulnerable Software and Affected Versions: Crocoblock JetMenu versions n/a through 2.4.11.1 Description: A flaw exists in Crocoblock JetMenu that allows the retrieval of embedded sensitive data through the insertion of sensitive information into sent data. Recommendations: Update...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•6 views

CVE-2025-53987: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/07/16 10:57 a.m.•19 views

WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by stealthcopter in WordPress Plugin JetMenu versions = 2.4.11.1...

6.5CVSS6.7AI score0.00368EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/17 10:49 p.m.•27 views

CVE-2025-26953

Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...

7.5CVSS7.2AI score0.00447EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 10:15 p.m.•20 views

CVE-2025-26953

Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...

7.5CVSS0.00447EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 9:53 p.m.•33 views

CVE-2025-26953 WordPress JetMenu plugin <= 2.4.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...

7.5CVSS0.00447EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 9:53 p.m.•103 views

CVE-2025-26953

CVE-2025-26953 is a Missing Authorization vulnerability in Crocoblock JetMenu (JetMenu for Elementor) affecting versions up to and including 2.4.9. The issue allows accessing functionality not constrained by ACLs, with CVSS v3.1 base score 7.5 (Network, Low attack complexity, No privileges requir...

7.5CVSS7.2AI score0.00447EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 9:53 p.m.•14 views

CVE-2025-26953 WordPress JetMenu plugin <= 2.4.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...

7.5CVSS8.6AI score0.00447EPSS
SaveExploits0References1
Rows per page
Query Builder