Lucene search
+L

216 matches found

NVD
NVD
•added 2026/03/27 6:16 a.m.•20 views

CVE-2026-33559

WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user...

5.4CVSS0.00287EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/27 4:56 a.m.•4 views

CVE-2026-33559

WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user...

5.4CVSS5.8AI score0.00287EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/27 4:56 a.m.•7 views

CVE-2026-33559

WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user...

5.4CVSS5.9AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•1 views

CVE-2026-33559: Improper Neutralization of Input During Web Page Generation

WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user...

5.4CVSS5.5AI score0.00287EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/20 1:27 p.m.•14 views

CVE-2026-25323

Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through = 6.1.12...

4.3CVSS5.5AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/19 9:16 a.m.•16 views

CVE-2026-25323

Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through = 6.1.12...

4.3CVSS0.00253EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/19 8:26 a.m.•9 views

CVE-2026-25323

Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through = 6.1.12...

5.5AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•23 views

PT-2026-20693

Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through = 6.1.12...

5.5AI score0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•1 views

CVE-2026-25323: Missing Authorization

Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through = 6.1.12...

4.3CVSS5.9AI score0.00253EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/12 4:47 p.m.•7 views

EUVD-2025-146531

Malicious code in verify-aikun-mika npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 4:47 p.m.•15 views

Malicious code in verify-aikun-mika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6ccc85730f4f1661261b761e20603c1b5ff53124e0569c6a81fe5449bdf485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/09/27 9:45 a.m.•12 views

WordPress WP Microdata plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin WP Microdata versions = 1.0...

6.5CVSS6.1AI score0.00159EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/07/18 12:30 p.m.•14 views

WordPress LeadBI Plugin for WordPress plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin LeadBI Plugin for WordPress versions = 1.7...

6.5CVSS6.1AI score0.0021EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/06/12 3:37 p.m.•15 views

WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin MultiVendorX versions = 4.2.23...

8.6CVSS7AI score0.00328EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/11 12:18 p.m.•16 views

WordPress Fazyvo theme <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Fazyvo versions = 1.6...

7.1CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/10 2:51 p.m.•13 views

WordPress Industrial Lite theme <= 1.0.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Industrial Lite versions = 1.0.8...

4.3CVSS7AI score0.00338EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/02 2:10 p.m.•13 views

WordPress Tiger theme <= 2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Tiger versions = 2.0...

6.5CVSS6.1AI score0.00232EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/02 1:57 p.m.•12 views

WordPress Tiger theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Tiger versions = 2.0...

7.1CVSS6.1AI score0.00277EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/02 1:41 p.m.•32 views

CVE-2025-31557

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MiKa OSM osm allows DOM-Based XSS.This issue affects OSM: from n/a through = 6.1.13...

6.5CVSS7.2AI score0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/01 4:09 p.m.•21 views

WordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Pearl versions = 1.3.9...

5.4CVSS8.5AI score0.00356EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder