Lucene search
K

13 matches found

NVD
NVD
added 2026/02/03 11:16 p.m.5 views

CVE-2026-1755

The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpattachmentimagealt’ post meta in all versions up to, and including, 0.13.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00043EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/02/03 10:49 p.m.6 views

WordPress Menu Icons by ThemeIsle plugin <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by lucsob in WordPress Plugin Menu Icons by ThemeIsle versions = 0.13.20...

6.4CVSS5.3AI score0.00043EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/03 10:22 p.m.24 views

CVE-2026-1755 Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting

The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpattachmentimagealt’ post meta in all versions up to, and including, 0.13.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00043EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/03 10:22 p.m.2 views

CVE-2026-1755

The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpattachmentimagealt’ post meta in all versions up to, and including, 0.13.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.6AI score0.00043EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.2 views

WordPress plugin Menu Icons by ThemeIsle 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.8AI score0.00043EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.1 views

PT-2026-6056

Name of the Vulnerable Software and Affected Versions The Menu Icons by ThemeIsle plugin for WordPress versions up to and including 0.13.20 Description The software is susceptible to a Stored Cross-Site Scripting issue due to inadequate input sanitization and output escaping. This allows...

6.4CVSS5.7AI score0.00043EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-44239

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00273EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/05/16 5:33 a.m.26 views

CVE-2024-4635 Menu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘addmimetype’ function in versions up to, and including, 0.13.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level...

6.4CVSS5.8AI score0.00273EPSS
Exploits0References3
CVE
CVE
added 2024/05/16 5:33 a.m.50 views

CVE-2024-4635

The vulnerability CVE-2024-4635 affects Menu Icons by ThemeIsle (WordPress plugin). In versions up to 0.13.13, stored cross-site scripting can be triggered via the add_mime_type function due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at auth...

6.4CVSS5.7AI score0.00273EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/05/16 1:2 a.m.1 views

WordPress Menu Icons by ThemeIsle plugin <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG Upload vulnerability discovered by wesley wcraft in WordPress Plugin Menu Icons by ThemeIsle versions = 0.13.13...

6.4CVSS5.8AI score0.00273EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/16 12:0 a.m.1 views

WordPress plugin Menu Icons by ThemeIsle 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

6.4CVSS5.9AI score0.00273EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2010/04/19 12:0 a.m.28 views

Mandriva Update for k3b MDVA-2010:122 (k3b)

Check for the Version of k3b OpenVAS Vulnerability Test Mandriva Update for k3b MDVA-2010:122 k3b Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

5.8CVSS6.3AI score0.01217EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2010/04/19 12:0 a.m.22 views

Mandriva Update for k3b MDVA-2010:122 (k3b)

Check for the Version of k3b OpenVAS Vulnerability Test Mandriva Update for k3b MDVA-2010:122 k3b Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

5.8CVSS6.3AI score0.01217EPSS
Exploits1References2
Rows per page
Query Builder