Lucene search
K

29 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:28 p.m.6 views

CVE-2026-4730

The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chartid' shortcode attribute in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. Th...

6.4CVSS5.7AI score0.00188EPSS
Exploits0References1
NVD
NVD
added 2026/05/05 3:15 a.m.24 views

CVE-2026-4730

The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chartid' shortcode attribute in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. Th...

6.4CVSS0.00188EPSS
Exploits0References4
CVE
CVE
added 2026/05/05 2:26 a.m.7 views

CVE-2026-4730

The CVE concerns the WordPress plugin “Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website” (plugin name as stated in sources). It is vulnerable to Stored Cross-Site Scripting via the chartid shortcode attribute in all versions up to and including 2.1.0 due to insuf...

6.4CVSS6AI score0.00188EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/05 2:26 a.m.8 views

CVE-2026-4730 Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'chartid' Shortcode Attribute

The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chartid' shortcode attribute in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. Th...

6.4CVSS6AI score0.00188EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/05 2:26 a.m.49 views

CVE-2026-4730 Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'chartid' Shortcode Attribute

The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chartid' shortcode attribute in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. Th...

6.4CVSS0.00188EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/05 2:26 a.m.3 views

CVE-2026-4730

The Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'chartid' shortcode attribute in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. Th...

6.4CVSS6AI score0.00188EPSS
Exploits0References5
Patchstack
Patchstack
added 2026/05/04 2:7 p.m.9 views

WordPress Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website plugin <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website versions = 2.1.0...

6.4CVSS5.8AI score0.00188EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 12:52 p.m.7 views

CVE-2014-4017

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

4.3CVSS6AI score0.01636EPSS
Exploits1References1
NVD
NVD
added 2025/12/18 8:16 a.m.8 views

CVE-2025-64375

Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through = 3.20.1...

6.5CVSS0.00195EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.7 views

CVE-2025-64375

WP Social Ninja (wp-social-reviews) plugin

6.5CVSS6.6AI score0.00195EPSS
In wildExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.1 views

CVE-2025-64375 WordPress WP Social Ninja plugin <= 3.20.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through = 3.20.1...

6.5CVSS6.6AI score0.00195EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.2 views

WordPress plugin WP Social Ninja 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.5AI score0.00217EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.3 views

PT-2025-48647

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

6.1CVSS5.2AI score0.00219EPSS
Exploits0References7
Patchstack
Patchstack
added 2025/11/14 2:45 p.m.3 views

WordPress WP Social Ninja plugin <= 3.20.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Social Ninja versions = 3.20.1...

6.5CVSS7AI score0.00195EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-3949

Malware in sbrugna...

4.3CVSS6.3AI score0.01636EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-34208

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00298EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/24 7:22 a.m.6 views

CVE-2025-8009 Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read

The Security Ninja – WordPress Security Plugin & Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.242 via the 'getfilesource' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to extra...

4.9CVSS0.00569EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 7:5 a.m.2 views

CVE-2024-11382

The Common Ninja: Fully Customizable & Perfectly Responsive Free Widgets for WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'commonninja' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output...

6.4CVSS5.8AI score0.00298EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.2 views

WordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Compare Ninja versions = 2.1.0...

6.5CVSS6.1AI score0.00357EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.1 views

WordPress plugin Compare Ninja 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00357EPSS
Exploits0References2
Rows per page
Query Builder