Lucene search
+L

1994 matches found

Vulnrichment
Vulnrichment
•added 2025/05/07 2:19 p.m.•7 views

CVE-2025-47497 WordPress Logo Showcase <= 3.0.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themepoints Logo Showcase allows DOM-Based XSS. This issue affects Logo Showcase: from n/a through 3.0.4...

6.5CVSS6.5AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:19 p.m.•30 views

CVE-2025-47497 WordPress Logo Showcase plugin <= 3.0.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows DOM-Based XSS.This issue affects Logo Showcase: from n/a through = 3.0.4...

6.5CVSS0.00264EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•18 views

PT-2025-20122 · Unknown · Themepoints Logo Showcase

Name of the Vulnerable Software and Affected Versions: themepoints Logo Showcase versions 3.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

7.5CVSS6.8AI score0.00596EPSS
SaveExploits2References12
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•12 views

WordPress plugin Logo Showcase 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.5AI score0.00264EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•2 views

CVE-2025-47497: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows DOM-Based XSS.This issue affects Logo Showcase: from n/a through = 3.0.4...

6.5CVSS5.8AI score0.00264EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/01 5:15 a.m.•17 views

CVE-2025-3952

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'ptoremovelogo' function in all versions up to, and including, 5.1.16. This makes it possible for...

8.1CVSS5.7AI score0.0043EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/01 12:00 a.m.•17 views

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS8AI score0.0043EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/25 11:09 p.m.•35 views

CVE-2025-39525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/25 3:42 p.m.•14 views

CVE-2025-39429

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo szechenyi-2020-logo allows PHP Local File Inclusion.This issue affects Széchenyi 2020 Logo: from n/a through = 1.1...

7.5CVSS7.2AI score0.00705EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/18 12:00 a.m.•18 views

PT-2025-17250 · WordPress · The Login Manager – Design Login Page

Name of the Vulnerable Software and Affected Versions: The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress versions up to, and including, 2.0.5 Description: The issue is related to Stored Cross-Site Scripting via Custom logo and background URLs du...

4.4CVSS5.2AI score0.00233EPSS
SaveExploits0References6
NVD
NVD
•added 2025/04/17 4:15 p.m.•29 views

CVE-2025-39429

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo szechenyi-2020-logo allows PHP Local File Inclusion.This issue affects Széchenyi 2020 Logo: from n/a through = 1.1...

7.5CVSS0.00705EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:17 p.m.•75 views

CVE-2025-39429

CVE-2025-39429 is a Local File Inclusion vulnerability in the WordPress plugin Széchenyi 2020 Logo (versions n/a–1.1). The weakness stems from improper filename handling in PHP Include/Require, enabling an attacker to influence file inclusion through crafted input. The provided Connected/External...

7.5CVSS7.2AI score0.00705EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:17 p.m.•12 views

CVE-2025-39429 WordPress Széchenyi 2020 Logo <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo szechenyi-2020-logo allows PHP Local File Inclusion.This issue affects Széchenyi 2020 Logo: from n/a through = 1.1...

7.5CVSS8.7AI score0.00705EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/17 3:17 p.m.•29 views

CVE-2025-39429 WordPress Széchenyi 2020 Logo <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo szechenyi-2020-logo allows PHP Local File Inclusion.This issue affects Széchenyi 2020 Logo: from n/a through = 1.1...

7.5CVSS0.00705EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•5 views

CVE-2025-39429: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo szechenyi-2020-logo allows PHP Local File Inclusion.This issue affects Széchenyi 2020 Logo: from n/a through = 1.1...

7.5CVSS5.8AI score0.00705EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•16 views

PT-2025-16996 · Földesi · Széchenyi 2020 Logo

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo allows PHP Local File Inclusion. This issue affects Széchenyi 2020 Logo: from n/a through 1.1...

7.5CVSS8.1AI score0.00705EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•16 views

WordPress plugin Széchenyi 2020 Logo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00705EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/16 2:07 p.m.•15 views

WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Logo Carousel Slider versions = 2.1.3...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/04/16 1:15 p.m.•12 views

CVE-2025-39525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/16 12:45 p.m.•7 views

CVE-2025-39525 WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder