Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

9950 matches found

RedhatCVE
RedhatCVE•added 2026/01/01 9:12 a.m.•21 views

CVE-2025-62761

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BasePress Knowledge Base documentation & wiki plugin – BasePress basepress allows Stored XSS.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through = 2.17.0.1...

6.5CVSS5.9AI score0.00144EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/12/31 11:5 a.m.•7 views

CVE-2025-68992

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allows Stored XSS.This issue affects BWL Knowledge Base Manager: from n/a through = 1.6.3...

6.5CVSS5.9AI score0.00162EPSS
SaveExploits0References1
NVD
NVD•added 2025/12/31 9:15 a.m.•8 views

CVE-2025-62761

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BasePress Knowledge Base documentation & wiki plugin – BasePress basepress allows Stored XSS.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through = 2.17.0.1...

6.5CVSS0.00144EPSS
SaveExploits0References1
CVE
CVE•added 2025/12/31 8:44 a.m.•15 views

CVE-2025-62761

CVE-2025-62761 affects Knowledge Base documentation & wiki plugin – BasePress Docs (BasePress) for WordPress. The issue is an authenticated (Contributor+) stored cross-site scripting vulnerability in BasePress Docs, allowing stored XSS when processing input in the plugin. Affected versions are Ba...

6.5CVSS5.9AI score0.00144EPSS
SaveExploits0References1
EUVD
EUVD•added 2025/12/31 8:44 a.m.•8 views

EUVD-2025-205906

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BasePress Knowledge Base documentation & wiki plugin – BasePress allows Stored XSS.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through 2.17.0.1...

6.5CVSS5.5AI score0.00144EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/12/31 8:44 a.m.•7 views

CVE-2025-62761 WordPress Knowledge Base documentation & wiki plugin – BasePress plugin <= 2.17.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BasePress Knowledge Base documentation & wiki plugin – BasePress basepress allows Stored XSS.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through = 2.17.0.1...

6.5CVSS5.9AI score0.00144EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/12/31 12:0 a.m.•11 views

PT-2025-54293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BasePress Knowledge Base documentation & wiki plugin – BasePress allows Stored XSS.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through 2.17.0.1...

6.5CVSS5.9AI score0.00144EPSS
SaveExploits0References2
EUVD
EUVD•added 2025/12/30 12:30 p.m.•8 views

EUVD-2025-205744

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allows Stored XSS.This issue affects BWL Knowledge Base Manager: from n/a through = 1.6.3...

6.5CVSS5.5AI score0.00162EPSS
SaveExploits0References2
NVD
NVD•added 2025/12/30 11:15 a.m.•5 views

CVE-2025-68992

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allows Stored XSS.This issue affects BWL Knowledge Base Manager: from n/a through = 1.6.3...

6.5CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE•added 2025/12/30 10:47 a.m.•13 views

CVE-2025-68992

CVE-2025-68992 affects BWL Knowledge Base Manager (bwL-kb-manager) for WordPress. Connected documents confirm a stored cross-site scripting (XSS) vulnerability in BW KBase Manager, affecting versions up to 1.6.3. The Wordfence report lists this as an authenticated (Contributor+) Stored XSS, indic...

6.5CVSS5.6AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/12/30 10:47 a.m.•33 views

CVE-2025-68992 WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allows Stored XSS.This issue affects BWL Knowledge Base Manager: from n/a through = 1.6.3...

6.5CVSS0.00162EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/12/30 10:47 a.m.•2 views

CVE-2025-68992 WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allows Stored XSS.This issue affects BWL Knowledge Base Manager: from n/a through = 1.6.3...

6.5CVSS5.6AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/12/30 12:0 a.m.•6 views

PT-2025-53881

Name of the Vulnerable Software and Affected Versions xenioushk BWL Knowledge Base Manager versions through 1.6.3 Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This means that malicious scrip...

6.5CVSS5.9AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD•added 2025/12/30 12:0 a.m.•5 views

WordPress plugin BWL Knowledge Base Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.7AI score0.00162EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2025/12/22 5:13 a.m.•17 views

WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin BWL Knowledge Base Manager versions = 1.6.3...

6.5CVSS6.1AI score0.00162EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE•added 2025/12/17 10:8 p.m.•19 views

CVE-2025-64520

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch...

6.5CVSS6.7AI score0.00193EPSS
SaveExploits0References1
NVD
NVD•added 2025/12/16 10:15 p.m.•8 views

CVE-2025-64520

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch...

6.5CVSS0.00193EPSS
SaveExploits0References2
OSV
OSV•added 2025/12/16 10:15 p.m.•7 views

UBUNTU-CVE-2025-64520

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch...

6.5CVSS5.8AI score0.00193EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2025/12/16 9:59 p.m.•3 views

CVE-2025-64520 GLPI vulnerable to unauthorized access to restricted Knowledge Base items through the API

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch...

6.5CVSS6.3AI score0.00193EPSS
SaveExploits0References2
OSV
OSV•added 2025/12/16 9:59 p.m.•7 views

CVE-2025-64520 GLPI vulnerable to unauthorized access to restricted Knowledge Base items through the API

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch...

6.5CVSS6.6AI score
SaveExploits0References4
Rows per page
Query Builder