Lucene search
K

51 matches found

NVD
NVD
added 2026/01/13 11:15 p.m.2 views

CVE-2020-36919

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...

6.1CVSS0.00087EPSS
Exploits1References3
CVE
CVE
added 2026/01/13 10:55 p.m.8 views

CVE-2020-36919

WPForms 1.7.8 is affected by a cross-site scripting (XSS) vulnerability in the slider import search feature and the tab parameter. The issue can be triggered via the ListTable.php endpoint, where an attacker can inject arbitrary JavaScript to run in a victim’s browser. The vulnerable parameter is...

6.1CVSS6.2AI score0.00087EPSS
Exploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 8:47 a.m.2 views

CVE-2025-23808

Cross-Site Request Forgery CSRF vulnerability in Dutch van Andel Custom List Table Example custom-list-table-example allows Reflected XSS.This issue affects Custom List Table Example: from n/a through = 1.4.1...

7.1CVSS7.2AI score0.00138EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3440

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00138EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-5612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote...

6.1CVSS7AI score0.01526EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-5833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the columntitle function in wp-admin/includes/class-wp-media- list-table.php in WordPress before 4.5.3 allows remote...

6.1CVSS6.6AI score0.01221EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:22 a.m.2 views

CVE-2024-4541

The Custom Product List Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation when modifying products. This makes it possible for unauthenticated attackers to add, delete, bulk edit,...

4.3CVSS5.8AI score0.00115EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:10 a.m.3 views

CVE-2024-13664

The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpbpostlisttable' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00114EPSS
Exploits0References1
NVD
NVD
added 2025/01/30 2:15 p.m.6 views

CVE-2024-13664

The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpbpostlisttable' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00114EPSS
Exploits0References2
OSV
OSV
added 2025/01/30 2:15 p.m.1 views

CVE-2024-13664

The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpbpostlisttable' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS5.9AI score
Exploits0References2
Patchstack
Patchstack
added 2025/01/30 7:22 a.m.1 views

WordPress WP Post List Table plugin <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin WP Post List Table versions = 1.0.3...

6.4CVSS5.7AI score0.00114EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.1 views

WordPress plugin WP Post List Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8.2AI score0.00114EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/30 12:0 a.m.1 views

PT-2025-2240 · WordPress · Wp Post List Table

Name of the Vulnerable Software and Affected Versions: WP Post List Table plugin for WordPress versions up to, and including, 1.0.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wpb post list table' shortcode due to insufficient input sanitization and output...

6.4CVSS8AI score0.00114EPSS
Exploits0References7
NVD
NVD
added 2025/01/16 9:15 p.m.2 views

CVE-2025-23808

Cross-Site Request Forgery CSRF vulnerability in Dutch van Andel Custom List Table Example custom-list-table-example allows Reflected XSS.This issue affects Custom List Table Example: from n/a through = 1.4.1...

7.1CVSS0.00138EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/16 8:7 p.m.10 views

CVE-2025-23808 WordPress Custom List Table Example Plugin <=1.4.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dutch van Andel Custom List Table Example custom-list-table-example allows Reflected XSS.This issue affects Custom List Table Example: from n/a through = 1.4.1...

7.1CVSS0.00138EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:7 p.m.4 views

CVE-2025-23808 WordPress Custom List Table Example Plugin <=1.4.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dutch van Andel Custom List Table Example custom-list-table-example allows Reflected XSS.This issue affects Custom List Table Example: from n/a through = 1.4.1...

7.1CVSS7.2AI score0.00138EPSS
Exploits0References1
CVE
CVE
added 2025/01/16 8:7 p.m.39 views

CVE-2025-23808

CVE-2025-23808 affects the WordPress plugin Custom List Table Example. The issue is described as CSRF leading to a reflected XSS, with a CVSS v3.1 base score of 7.1 (HIGH). Exploitation details, affected versions (from n/a through 1.4.1), and the reported status indicate this is a CSRF-to-reflect...

7.1CVSS7.2AI score0.00138EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.1 views

WordPress Custom List Table Example Plugin <=1.4.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

CSRF to Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Custom List Table Example versions = 1.4.1...

7.1CVSS6.1AI score0.00138EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.1 views

WordPress plugin Custom List Table Example 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin Custom Li...

7.1CVSS8.2AI score0.00138EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/08 12:0 a.m.2 views

PT-2024-16609 · WordPress · The Charitable – Donation Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress versions prior to 1.8.2 The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for...

6.1CVSS6.8AI score0.02566EPSS
Exploits0References13
Rows per page
Query Builder