Lucene search
+L

13006 matches found

CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•18 views

WordPress plugin OK Poster Group cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.9AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•14 views

WordPress plugin VForm has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS6.9AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•19 views

WordPress plugin Planyo online reservation system has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS6.5AI score0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•16 views

PT-2025-14399 · Unknown · Secure Copy Content Protection/Content Locking

Name of the Vulnerable Software and Affected Versions: Ays Pro Secure Copy Content Protection and Content Locking versions n/a through 4.4.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

7.1CVSS7AI score0.00385EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•3 views

PT-2025-14128

Name of the Vulnerable Software and Affected Versions dxladner Client Showcase versions 1.2.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

6.5CVSS0.0036EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•16 views

WordPress plugin BlockWheels has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6.7AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•11 views

WordPress plugin HMH Footer Builder for Elementor: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.7AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•19 views

WordPress plugin BuddyPress: Members Only cross-site scripting vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.5CVSS6.4AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•20 views

WordPress plugin Beds24 Online Booking has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

6.5CVSS6.5AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•16 views

WordPress plugin: Auto Scroll for Reading – Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.8AI score0.00312EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•14 views

WordPress plugin Oracle Cards Lite has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•20 views

WordPress plugin Kento WordPress Stats has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.9AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•13 views

WordPress plugin Google Font Fix: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•18 views

WordPress plugin WP Cards: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•16 views

WordPress plugin Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) – All in One SQL Injection Vulnerabilities

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Ai Auto Tool Content Writing Assistant Gemini...

8.5CVSS8.8AI score0.00461EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•16 views

WordPress plugin Access Areas has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.8AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•14 views

WordPress plugin WP Proposals has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

5.9CVSS6.2AI score0.00368EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•7 views

CVE-2025-31745: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arni Cinco Subscription Form for Feedblitz feedblitz-email-subscription allows Stored XSS.This issue affects Subscription Form for Feedblitz: from n/a through = 1.0.9...

6.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•7 views

CVE-2025-31855: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in softnwords SMM API smm-api allows Stored XSS.This issue affects SMM API: from n/a through = 6.0.31...

6.5CVSS5.8AI score0.00274EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•11 views

CVE-2025-30876: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows SQL Injection.This issue affects Ads by WPQuads: from n/a through = 2.0.87.1...

9.3CVSS5.8AI score0.00469EPSS
SaveExploits1References1
Rows per page
Query Builder