Lucene search
K

9 matches found

Vulnrichment
Vulnrichment
โ€ขadded 2026/02/19 8:27 a.m.โ€ข2 views

CVE-2026-25432 WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.6.7...

6.5CVSS5.5AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
โ€ขadded 2026/01/25 10:44 a.m.โ€ข3 views

WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Omnipress versions = 1.6.7...

6.5CVSS5.4AI score0.00045EPSS
Exploits0Affected Software1
Cvelist
Cvelist
โ€ขadded 2026/01/23 2:28 p.m.โ€ข30 views

CVE-2026-24538 WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through = 1.6.7...

7.5CVSS0.0022EPSS
Exploits0References1
Patchstack
Patchstack
โ€ขadded 2025/12/31 12:0 a.m.โ€ข10 views

WordPress Omnipress plugin <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Kai Aizen in WordPress Plugin Omnipress versions = 1.6.5...

6.4CVSS5.9AI score0.00013EPSS
Exploits2References1Affected Software1
CVE
CVE
โ€ขadded 2025/12/05 5:31 a.m.โ€ข17 views

CVE-2025-12163

CVE-2025-12163 affects the Omnipress WordPress plugin (versions โ‰ค 1.6.3). It describes a stored cross-site scripting vulnerability via SVG file uploads, caused by insufficient input sanitization and output escaping. Exploitation requires Author-level access or higher, and payloads can execute in ...

6.4CVSS6.1AI score0.00013EPSS
Exploits2References8
Vulnrichment
Vulnrichment
โ€ขadded 2025/12/05 5:31 a.m.โ€ข4 views

CVE-2025-12163 Omnipress <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting

The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to...

6.4CVSS4.7AI score0.00013EPSS
Exploits2References7
CNNVD
CNNVD
โ€ขadded 2025/06/27 12:0 a.m.โ€ข1 views

WordPress plugin Omnipress ่ทจ็ซ™่„šๆœฌๆผๆดž

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References1
CNNVD
CNNVD
โ€ขadded 2025/03/14 12:0 a.m.โ€ข1 views

WordPress plugin Omnipress ๅฎ‰ๅ…จๆผๆดž

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS8.7AI score0.0008EPSS
Exploits0References4
CNNVD
CNNVD
โ€ขadded 2024/10/17 12:0 a.m.โ€ข1 views

WordPress plugin Omnipress ่ทจ็ซ™่„šๆœฌๆผๆดž

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00285EPSS
Exploits0References2
Rows per page
Query Builder