Lucene search
+L

38 matches found

CVE
CVE
•added 2026/08/29 6:00 a.m.•28 views

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin (versions prior to 1.0.4 ) contains an improper access control vulnerability. The plugin fails to perform sufficient authorization checks on its REST API routes and inconsistently enforces per-class access codes . This securi...

6.5CVSS5.9AI score0.00275EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 5:03 p.m.•17 views

CVE-2026-23807

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•13 views

EUVD-2026-15543

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:16 p.m.•12 views

CVE-2026-23807

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

7.1CVSS0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•42 views

CVE-2026-23807 WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

7.1CVSS0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:14 p.m.•6 views

CVE-2026-23807 WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:14 p.m.•25 views

CVE-2026-23807

The CVE-2026-23807 entry concerns the WordPress WP Telegram Widget and Join Link plugin up to version 2.2.13, which is affected by a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The issue affects WP Telegram Widget and J...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•16 views

PT-2026-27842

Name of the Vulnerable Software and Affected Versions WP Telegram Widget and Join Link versions through 2.2.13 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to reflected cross-site scripting XSS. This allows an...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•5 views

CVE-2026-23807: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•17 views

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.1CVSS5.6AI score0.00175EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/03/23 1:07 p.m.•19 views

WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin WP Telegram Widget and Join Link versions = 2.2.13...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•12 views

CVE-2025-68589

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS5.7AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•14 views

EUVD-2025-205246

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.11...

8.1CVSS6.5AI score0.00254EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•17 views

CVE-2025-68589

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•47 views

CVE-2025-68589 WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 1:10 p.m.•5 views

CVE-2025-68589 WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 1:10 p.m.•30 views

CVE-2025-68589

CVE-2025-68589 is a WordPress plugin vulnerability reported for the WP Telegram Widget and Join Link (WP telegram widget and join link). The connected Wordfence documentation lists it as a Missing Authorization issue with patch status “Patched” and affected version range “

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•12 views

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

5.3CVSS6.6AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•4 views

CVE-2025-68589: Missing Authorization

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•20 views

PT-2025-53277

Name of the Vulnerable Software and Affected Versions WP Socio WP Telegram Widget and Join Link versions through 2.2.11 Description The WP Telegram Widget and Join Link software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized...

8.1CVSS6.6AI score0.00254EPSS
SaveExploits0References4
Rows per page
Query Builder