Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
šŸ”„ Daily Hot!
šŸ’ŖšŸ½ CPE Enhanced Advisories
šŸ•¶ Shadow Exploits
šŸ•µšŸ¼ Vulners CPE
šŸ” Security news
šŸ’» Exploit updates
šŸ“‘ Blogs review
šŸ§ Linux vulnerabilities
šŸž Bugbounty
šŸ¤– AI High Score
šŸ“° CVE Feed
show all

90 matches found

RedhatCVE
RedhatCVEā€¢added 2026/03/26 3:4 p.m.ā€¢1 views

CVE-2026-3178

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' parameter in all versions up to, and including, 1.32.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6AI score0.00139EPSS
Exploits0References1
Patchstack
Patchstackā€¢added 2026/03/12 7:58 a.m.ā€¢3 views

WordPress Name Directory plugin <= 1.32.1 - Unauthenticated Stored Cross-Site Scripting via 'name_directory_name' vulnerability

Unauthenticated Stored Cross-Site Scripting via 'namedirectoryname' vulnerability discovered by Youssef Elouaer in WordPress Plugin Name Directory versions = 1.32.1...

7.2CVSS5.8AI score0.00139EPSS
Exploits0References1Affected Software1
EUVD
EUVDā€¢added 2026/03/11 12:31 p.m.ā€¢2 views

EUVD-2026-11143

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' parameter in all versions up to, and including, 1.32.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS5.9AI score0.00139EPSS
Exploits0References6
NVD
NVDā€¢added 2026/03/11 12:15 p.m.ā€¢1 views

CVE-2026-3178

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' parameter in all versions up to, and including, 1.32.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00139EPSS
Exploits0References5
Vulnrichment
Vulnrichmentā€¢added 2026/03/11 11:9 a.m.ā€¢1 views

CVE-2026-3178 Name Directory <= 1.32.1 - Unauthenticated Stored Cross-Site Scripting via 'name_directory_name'

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' parameter in all versions up to, and including, 1.32.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS5.9AI score0.00139EPSS
Exploits0References5
CVE
CVEā€¢added 2026/03/11 11:9 a.m.ā€¢4 views

CVE-2026-3178

The CVE concerns the WordPress Name Directory plugin (affected: all versions up to 1.32.1) and a Stored XSS via the name_directory_name parameter. The vulnerability stems from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts into pages that...

7.2CVSS5.9AI score0.00139EPSS
Exploits0References5
ATTACKERKB
ATTACKERKBā€¢added 2026/03/11 11:9 a.m.ā€¢1 views

CVE-2026-3178

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' parameter in all versions up to, and including, 1.32.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS5.9AI score0.00139EPSS
Exploits0References6
Cvelist
Cvelistā€¢added 2026/03/11 11:9 a.m.ā€¢24 views

CVE-2026-3178 Name Directory <= 1.32.1 - Unauthenticated Stored Cross-Site Scripting via 'name_directory_name'

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' parameter in all versions up to, and including, 1.32.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00139EPSS
Exploits0References5
Positive Technologies
Positive Technologiesā€¢added 2026/03/11 12:0 a.m.ā€¢1 views

PT-2026-24666

šŸšØ CVE-2026-3178 The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name directory name' parameter in all versions up to, and including, 1.32.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

7.2CVSS6AI score0.00139EPSS
Exploits0References9
RedhatCVE
RedhatCVEā€¢added 2026/02/11 1:16 p.m.ā€¢3 views

CVE-2026-1866

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin's sanitization function calling htmlentitydecode before wpkses, and then calling htmlentitydecode again on...

7.2CVSS5.6AI score0.00186EPSS
Exploits0References1
NVD
NVDā€¢added 2026/02/10 10:15 a.m.ā€¢4 views

CVE-2026-1866

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin's sanitization function calling htmlentitydecode before wpkses, and then calling htmlentitydecode again on...

7.2CVSS0.00186EPSS
Exploits0References5
Cvelist
Cvelistā€¢added 2026/02/10 9:26 a.m.ā€¢35 views

CVE-2026-1866 Name Directory <= 1.32.0 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin's sanitization function calling htmlentitydecode before wpkses, and then calling htmlentitydecode again on...

7.2CVSS0.00186EPSS
Exploits0References5
Vulnrichment
Vulnrichmentā€¢added 2026/02/10 9:26 a.m.ā€¢2 views

CVE-2026-1866 Name Directory <= 1.32.0 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin's sanitization function calling htmlentitydecode before wpkses, and then calling htmlentitydecode again on...

7.2CVSS5.6AI score0.00186EPSS
Exploits0References5
ATTACKERKB
ATTACKERKBā€¢added 2026/02/10 9:26 a.m.ā€¢3 views

CVE-2026-1866

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin's sanitization function calling htmlentitydecode before wpkses, and then calling htmlentitydecode again on...

7.2CVSS5.6AI score0.00186EPSS
Exploits0References6
CVE
CVEā€¢added 2026/02/10 9:26 a.m.ā€¢7 views

CVE-2026-1866

The WordPress plugin Name Directory (vulnerable up to 1.32.0) is affected by a Stored XSS due to double HTML-entity encoding in its sanitization flow. The plugin decodes HTML entities before wp_kses and decodes output again, enabling unauthenticated attackers to inject scripts via the public subm...

7.2CVSS5.6AI score0.00186EPSS
Exploits0References5
Patchstack
Patchstackā€¢added 2026/02/10 9:10 a.m.ā€¢4 views

WordPress Name Directory plugin <= 1.32.0 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form vulnerability

Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form vulnerability discovered by duy.thai in WordPress Plugin Name Directory versions = 1.32.0...

7.2CVSS5.4AI score0.00186EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologiesā€¢added 2026/02/10 12:0 a.m.ā€¢4 views

PT-2026-7246

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin's sanitization function calling html entity decode before wp kses, and then calling html entity decode again...

7.2CVSS5.7AI score0.00186EPSS
Exploits0References6
RedhatCVE
RedhatCVEā€¢added 2026/01/15 6:21 a.m.ā€¢2 views

CVE-2025-15283

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' and 'namedirectorydescription' parameters in all versions up to, and including, 1.30.3 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.1AI score0.00069EPSS
Exploits0References1
Patchstack
Patchstackā€¢added 2026/01/14 1:53 p.m.ā€¢3 views

WordPress Name Directory plugin <= 1.30.3 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters vulnerability

Unauthenticated Stored Cross-Site Scripting via Multiple Parameters vulnerability discovered by zer0gh0st in WordPress Plugin Name Directory versions = 1.30.3...

7.2CVSS5.7AI score0.00069EPSS
Exploits0References1Affected Software1
NVD
NVDā€¢added 2026/01/14 6:15 a.m.ā€¢4 views

CVE-2025-15283

The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'namedirectoryname' and 'namedirectorydescription' parameters in all versions up to, and including, 1.30.3 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS0.00069EPSS
Exploits0References4
Rows per page
Query Builder