Lucene search
+L

66 matches found

NVD
NVD
added yesterday5 views

CVE-2026-28169

Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier = 2.52.0 versions...

5.3CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-53947

Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier = 2.52.0 versions...

5.3CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added yesterday10 views

CVE-2026-28169

CVE-2026-28169 concerns unauthenticated sensitive data exposure in the WordPress plugin YITH WooCommerce Zoom Magnifier (versions

5.3CVSS5.4AI score
SaveExploits0References1
NVD
NVD
added 2026/06/27 2:16 a.m.15 views

CVE-2026-11356

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menutitle' and 'menumagnifiercolor' Settings in all versions up to, and including, 5.5.15 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS0.00344EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2026/06/27 1:27 a.m.11 views

CVE-2026-11356

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menutitle' and 'menumagnifiercolor' Settings in all versions up to, and including, 5.5.15 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS5.9AI score0.00344EPSS
SaveExploits0References11
EUVD
EUVD
added 2026/06/27 1:27 a.m.20 views

EUVD-2026-39931

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menutitle' and 'menumagnifiercolor' Settings in all versions up to, and including, 5.5.15 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS5.9AI score0.00344EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/06/27 12:0 a.m.31 views

PT-2026-53038

Name of the Vulnerable Software and Affected Versions Ivory Search – WordPress Search Plugin versions prior to 5.5.16 Description Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level access and above to perform Stored Cross-Site Scripting XSS...

4.4CVSS6AI score0.00344EPSS
SaveExploits0References14
Microsoft KB
Microsoft KB
added 2026/06/23 12:0 a.m.36 views

June 23, 2026—KB5095091 (OS Build 28000.2340) Preview

None None...

6.1AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-16025

Malware in sbrugna...

4.6CVSS6.7AI score0.00345EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-45639

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00374EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2022-49513

Malicious code in bioql PyPI...

2.4CVSS4.3AI score0.00237EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:4 a.m.7 views

CVE-2024-51840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rezaul Wd-image-magnifier-xoss wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through = 1.0...

6.5CVSS7.2AI score0.00374EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 8:44 a.m.6 views

Malicious code in cs-magnifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d412de7658e93719fd412b6f30d39270ed6190482deb65c00aaf002f96fe7e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/02/03 8:44 a.m.4 views

MAL-2025-1087 Malicious code in cs-magnifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d412de7658e93719fd412b6f30d39270ed6190482deb65c00aaf002f96fe7e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.9 views

CVE-2024-51840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rezaul Wd-image-magnifier-xoss wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through = 1.0...

6.5CVSS0.00374EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.28 views

CVE-2024-51840 WordPress Wd-image-magnifier-xoss plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rezaul Wd-image-magnifier-xoss wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through = 1.0...

6.5CVSS0.00374EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.6 views

CVE-2024-51840 WordPress Wd-image-magnifier-xoss plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rezaul haque Wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through 1.0...

6.5CVSS6.9AI score0.00374EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:31 p.m.46 views

CVE-2024-51840

CVE-2024-51840 is a DOM-based XSS in the WordPress plugin Wd-image-magnifier-xoss by Rezaul Haque, affecting versions “from n/a through 1.0.” The description cites “Improper Neutralization of Input During Web Page Generation,” indicating that unsafe input handling in page rendering enables cross-...

6.5CVSS7.2AI score0.00374EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.5 views

WordPress plugin Wd-image-magnifier-xoss 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00374EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/08 1:48 p.m.7 views

WordPress Wd-image-magnifier-xoss plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Wd-image-magnifier-xoss versions = 1.0...

6.5CVSS6.1AI score0.00374EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder