Lucene search
+L

28 matches found

Patchstack
Patchstack
added 2025/09/03 3:06 p.m.11 views

WordPress Latest Post Shortcode Plugin <= 14.0.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by 63n0 in WordPress Plugin Latest Post Shortcode versions = 14.0.3...

6.5CVSS6AI score0.00204EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2025/09/03 2:36 p.m.22 views

CVE-2025-58609 WordPress Latest Post Shortcode Plugin <= 14.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Stored XSS.This issue affects Latest Post Shortcode: from n/a through = 14.0.3...

6.5CVSS0.00204EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/03 2:36 p.m.27 views

CVE-2025-58609

CVE-2025-58609 affects the WordPress plugin Latest Post Shortcode (versions up to 14.0.3). The issue is a Stored XSS caused by improper input neutralization during web page generation. Exploitation could occur via the plugin’s shortcode rendering, leading to script execution in affected sites. Th...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/03 2:36 p.m.5 views

CVE-2025-58609 WordPress Latest Post Shortcode Plugin <= 14.0.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Stored XSS.This issue affects Latest Post Shortcode: from n/a through = 14.0.3...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.11 views

PT-2025-35743

Name of the Vulnerable Software and Affected Versions: Latest Post Shortcode versions through 14.0.3 Description: The Latest Post Shortcode contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. Recommendations: Update...

6.5CVSS5.8AI score0.00204EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/03 12:00 a.m.10 views

WordPress plugin Latest Post Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.5CVSS5.6AI score0.00204EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.9 views

WordPress Latest Post Accordian Slider plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Latest Post Accordian Slider plugin, which stems from a lack of random number validation on the lpaccordian...

6.1CVSS6.8AI score0.00117EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/22 12:00 a.m.12 views

WordPress plugin Latest Post Accordian Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Latest Post Accordian Slider plugin, which stems from a lack of random number validation on the lpaccordian...

6.1CVSS6.7AI score0.00117EPSS
SaveExploits0References4
Rows per page
Query Builder