Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:11 a.m.4 views

CVE-2025-1039

The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

7.2CVSS6AI score0.00504EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-31260

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31259

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00016EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-4595

Malicious code in bioql PyPI...

7.2CVSS9.1AI score0.00504EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/09/27 8:44 a.m.2 views

CVE-2025-60145

Cross-Site Request Forgery CSRF vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/a through = 1.2...

4.3CVSS5.9AI score0.00016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/27 8:44 a.m.1 views

CVE-2025-60144

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through = 1.2...

5.9CVSS5.9AI score0.0003EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/26 9:58 a.m.3 views

WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Lenix scss compiler versions = 1.2...

4.3CVSS6.6AI score0.00016EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 9:58 a.m.2 views

WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Lenix scss compiler versions = 1.2...

5.9CVSS6AI score0.0003EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/09/26 9:15 a.m.1 views

CVE-2025-60144

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through = 1.2...

5.9CVSS0.0003EPSS
Exploits0References1
NVD
NVD
added 2025/09/26 9:15 a.m.3 views

CVE-2025-60145

Cross-Site Request Forgery CSRF vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/a through = 1.2...

4.3CVSS0.00016EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/26 8:31 a.m.7 views

CVE-2025-60145 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/a through = 1.2...

4.3CVSS0.00016EPSS
Exploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.7 views

CVE-2025-60145

CVE-2025-60145 : CSRF in the Lenix scss compiler (WordPress plugin lenix-scss-compiler) affects versions up to 1.2.0. Description states Cross-Site Request Forgery with CVSS 3.1 base score 4.3 (Medium); attacker requires user interaction. No explicit exploit details or patched version are provide...

4.3CVSS5.9AI score0.00016EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/26 8:31 a.m.7 views

CVE-2025-60144 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through = 1.2...

5.9CVSS0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.5 views

CVE-2025-60144

CVE-2025-60144 concerns Stored XSS in the Lenix scss compiler caused by improper input neutralization during web page generation. Affected product: Lenix scss compiler (yonifre Lenix scss compiler) versions from n/a up to and including 1.2. The provided documents do not include exploitation detai...

5.9CVSS5.9AI score0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 8:31 a.m.1 views

CVE-2025-60144 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through = 1.2...

5.9CVSS5.2AI score0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.1 views

WordPress plugin Lenix scss compiler 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site reques...

4.3CVSS6.5AI score0.00016EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.2 views

PT-2025-39588

Name of the Vulnerable Software and Affected Versions yonifre Lenix scss compiler versions n/a through 1.2 Description A Cross-Site Request Forgery CSRF issue exists in the yonifre Lenix scss compiler. This allows attackers to perform actions on behalf of authenticated users. Recommendations At t...

4.3CVSS6.3AI score0.00016EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.1 views

WordPress plugin Lenix scss compiler 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

5.9CVSS5.7AI score0.0003EPSS
Exploits0References1
OSV
OSV
added 2025/02/20 1:15 p.m.0 views

CVE-2025-1039

The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

6.1CVSS7.4AI score0.00504EPSS
Exploits1References3
NVD
NVD
added 2025/02/20 1:15 p.m.11 views

CVE-2025-1039

The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

7.2CVSS0.00504EPSS
Exploits1References3
Rows per page
Query Builder