Lucene search
+L

12837 matches found

CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•16 views

WordPress plugin Yogi 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.1CVSS6AI score0.00235EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•13 views

WordPress plugin CoSchool LMS SQL注入漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the WordPress plugin CoSchool LMS, which stems from the...

8.5CVSS7.8AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•20 views

WordPress plugin TheGem 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.0021EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•16 views

WordPress plugin TheGem (Elementor) 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site scripting...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•30 views

WordPress plugin tagDiv Composer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

6.5CVSS6AI score0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•15 views

WordPress plugin tagDiv Composer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

7.1CVSS6AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•15 views

WordPress plugin Togo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•19 views

WordPress plugin Houzez Theme - Functionality 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. WordPress plugin Houz...

7.1CVSS6AI score0.00244EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•20 views

WordPress plugin WPMobile.App 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS5.8AI score0.00185EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•24 views

PT-2025-45297

Name of the Vulnerable Software and Affected Versions tagDiv Composer versions through 5.4.1 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, also known as Cross-site Scripting. This allows for potential malicious code execution through web...

6.5CVSS7AI score0.00204EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•24 views

PT-2025-45291

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Elementor thegem-elementor.This issue affects TheGem Elementor: from n/a through = 5.10.5...

6.5CVSS6.4AI score0.0021EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•23 views

WordPress plugin Booster for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

7.1CVSS6AI score0.00191EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•3 views

CVE-2025-54737: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through = 4.7.8...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•3 views

CVE-2025-64302: Improper Neutralization of Input During Web Page Generation

Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation...

6.4CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•3 views

CVE-2025-12486: Improper Neutralization of Input During Web Page Generation

Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The specific...

8.8CVSS6.7AI score0.00493EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•2 views

CVE-2025-54722: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ex-Themes WooTour woo-tour allows Reflected XSS.This issue affects WooTour: from n/a through = 3.6.3...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•3 views

CVE-2025-54721: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThimPress Resca resca allows Reflected XSS.This issue affects Resca: from n/a through = 3.0.2...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•1 views

CVE-2025-53573: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jegtheme Epic Review epic-review allows Reflected XSS.This issue affects Epic Review: from n/a through = 1.0.2...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•4 views

CVE-2025-53286: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jhainey Milevis Dropify wc-dropi-integration allows Reflected XSS.This issue affects Dropify: from n/a through = 4.7.2...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•20 views

WordPress plugin Easy Social Share Buttons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blogging sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

7.1CVSS5.9AI score0.00185EPSS
SaveExploits0References1
Rows per page
Query Builder