Lucene search
+L

37 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-28347

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.0032EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•8 views

EUVD-2024-44925

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-11687

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00616EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/23 8:40 a.m.•16 views

CVE-2025-50009

Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through = 1.5.3...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/20 3:15 p.m.•17 views

CVE-2025-50009

Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through = 1.5.3...

5.4CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/20 3:04 p.m.•10 views

CVE-2025-50009 WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Climax Themes Kata Plus allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Kata Plus: from n/a through 1.5.3...

5.4CVSS5.5AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/20 3:04 p.m.•34 views

CVE-2025-50009

CVE-2025-5009 (Kata Plus) : WordPress Kata Plus add-ons (1.5.3 and earlier) suffer a Missing Authorization/broken access control vulnerability. Root cause is incorrectly configured access control levels allowing unauthorized actions. Affected software: Kata Plus – Addons for Elementor – Widgets, ...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/20 3:04 p.m.•39 views

CVE-2025-50009 WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through = 1.5.3...

5.4CVSS0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•3 views

CVE-2025-50009: Missing Authorization

Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through = 1.5.3...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/20 12:00 a.m.•15 views

PT-2025-26366 · Climax Themes · Climax Themes Kata Plus

Name of the Vulnerable Software and Affected Versions: Climax Themes Kata Plus versions 1.5.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For Climax Themes...

5.4CVSS6.1AI score0.0032EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•11 views

WordPress plugin Kata Plus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.0032EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/06/19 4:30 p.m.•19 views

WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Kata Plus versions = 1.5.3...

5.4CVSS6.7AI score0.0032EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:17 a.m.•15 views

CVE-2024-50501

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Climax Themes Kata Plus kata-plus allows DOM-Based XSS.This issue affects Kata Plus: from n/a through = 1.4.7...

6.5CVSS5.9AI score0.00255EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/25 5:17 p.m.•13 views

CVE-2025-32572

Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus kata-plus allows Object Injection.This issue affects Kata Plus: from n/a through = 1.5.3...

9.8CVSS7.2AI score0.00616EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•12 views

CVE-2025-32572

Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus kata-plus allows Object Injection.This issue affects Kata Plus: from n/a through = 1.5.3...

9.8CVSS0.00616EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:47 p.m.•63 views

CVE-2025-32572

CVE-2025-32572 is a PHP object injection flaw caused by deserialization of untrusted data in the Kata Plus WordPress plugin family (Kata Plus – Addons for Elementor – Widgets, Extensions and Templates). Affected versions range up to 1.5.2 (with CVE entries tracking up to 1.5.3 per Patchstack/Word...

9.8CVSS7.2AI score0.00616EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:47 p.m.•8 views

CVE-2025-32572 WordPress Kata Plus Plugin <= 1.5.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus allows Object Injection. This issue affects Kata Plus: from n/a through 1.5.2...

9.8CVSS6.9AI score0.00616EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•11 views

WordPress plugin Kata Plus 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

9.8CVSS8.8AI score0.00616EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•1 views

CVE-2025-32572: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus kata-plus allows Object Injection.This issue affects Kata Plus: from n/a through = 1.5.3...

9.8CVSS5.8AI score0.00616EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/15 4:50 p.m.•11 views

WordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Le Ngoc Anh in WordPress Plugin Kata Plus versions = 1.5.3...

9.8CVSS8.7AI score0.00616EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder