Lucene search
+L

17777 matches found

Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•31 views

CVE-2025-26984 WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Reflected XSS.This issue affects SMS Alert Order Notifications: from n/a through = 3.7.8...

7.1CVSS0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•44 views

CVE-2025-26988 WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through = 3.7.8...

9.3CVSS0.00523EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•87 views

CVE-2025-26988

CVE-2025-26988 (WordPress SMS Alert Order Notifications – WooCommerce) Concrete Details: A SQL Injection vulnerability exists in the WordPress plugin SMS Alert Order Notifications – WooCommerce (affected:

9.3CVSS7.3AI score0.00523EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/03/03 1:30 p.m.•76 views

CVE-2025-23741

CVE-2025-23741 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Notifications Center . Affected versions are up to and including 1.5.2 . The issue arises from improper neutralization of input during web page generation, enabling reflected XSS. CVSS‑3.1 data shows: A...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•34 views

CVE-2025-23741 WordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Florian Chaillou Notifications Center notifications-center allows Reflected XSS.This issue affects Notifications Center: from n/a through = 1.5.2...

7.1CVSS0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•12 views

CVE-2025-23741 WordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Florian Chaillou Notifications Center notifications-center allows Reflected XSS.This issue affects Notifications Center: from n/a through = 1.5.2...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•5 views

CVE-2025-23586 WordPress WP Post Category Notifications plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MAL73049 WP Post Category Notifications wp-post-category-notifications allows Reflected XSS.This issue affects WP Post Category Notifications: from n/a through = 1.0...

7.1CVSS5.2AI score0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•54 views

CVE-2025-23586

CVE-2025-23586 concerns the WordPress plugin WP Post Category Notifications (versions &lt;= 1.0). The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation, enabling attacker-controlled input to be reflected in a web pag...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•29 views

CVE-2025-23556 WordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netbitsolutions Push Envoy Notifications push-envoy allows Reflected XSS.This issue affects Push Envoy Notifications: from n/a through = 1.0.0...

7.1CVSS0.0037EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•61 views

CVE-2025-23556

CVE-2025-23556 concerns a reflected Cross-Site Scripting (XSS) in the WordPress Push Envoy Notifications plugin

7.1CVSS5.9AI score0.0037EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•19 views

WordPress plugin Push Envoy Notifications 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS5.9AI score0.0037EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•15 views

WordPress plugin WP Post Category Notifications 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•2 views

PT-2025-9383

Name of the Vulnerable Software and Affected Versions WP Post Category Notifications versions 1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For WP Pos...

7.1CVSS0.00393EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•6 views

PT-2025-9373

Name of the Vulnerable Software and Affected Versions Push Envoy Notifications versions 1.0.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in Push Envoy Notifications...

7.1CVSS0.0037EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•5 views

CVE-2025-26984: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Reflected XSS.This issue affects SMS Alert Order Notifications: from n/a through = 3.7.8...

7.1CVSS5.8AI score0.00331EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•3 views

CVE-2025-23586: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MAL73049 WP Post Category Notifications wp-post-category-notifications allows Reflected XSS.This issue affects WP Post Category Notifications: from n/a through = 1.0...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•4 views

CVE-2025-23556: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netbitsolutions Push Envoy Notifications push-envoy allows Reflected XSS.This issue affects Push Envoy Notifications: from n/a through = 1.0.0...

7.1CVSS5.8AI score0.0037EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•5 views

PT-2025-9481

Name of the Vulnerable Software and Affected Versions SMS Alert Order Notifications – WooCommerce versions 3.7.8 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

9.3CVSS0.00523EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•19 views

WordPress plugin SMS Alert Order Notifications – WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin SMS Alert Order Notifications...

9.3CVSS8.8AI score0.00523EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•7 views

PT-2025-9480

Name of the Vulnerable Software and Affected Versions SMS Alert Order Notifications – WooCommerce versions 3.7.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks...

7.1CVSS0.00331EPSS
SaveExploits0References6
Rows per page
Query Builder