Lucene search
+L

25460 matches found

CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•22 views

WordPress plugin SUMO Affiliates Pro 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•17 views

WordPress plugin Ultimate Membership Pro 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.1CVSS5.8AI score0.00342EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•23 views

WordPress plugin WPBookit Pro 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.9CVSS5.9AI score0.00328EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•23 views

WordPress plugin WPBookit Pro 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS5.8AI score0.00286EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•18 views

WordPress plugin WP Configurator Pro 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

7.1CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•6 views

CVE-2026-32494: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider by Ays: from n/a through = 2.7.1...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•3 views

CVE-2026-24989: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Object Injection.This issue affects SUMO Affiliates Pro: from n/a through 11.4.0...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•9 views

Ubuntu 20.04 LTS : Linux kernel (AWS FIPS) vulnerability (USN-8121-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8121-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to...

5.9AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2026/03/24 6:45 p.m.•22 views

WordPress Woocommerce Custom Product Addons Pro plugin <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula vulnerability

Unauthenticated Remote Code Execution via Custom Pricing Formula vulnerability discovered by Ren Voza in WordPress Plugin Woocommerce Custom Product Addons Pro versions = 5.4.1...

9.8CVSS5.9AI score0.00989EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/03/24 12:16 p.m.•19 views

CVE-2019-25637

X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload...

8.6CVSS0.00183EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/24 11:27 a.m.•26 views

CVE-2019-25637

X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows a local attacker to execute arbitrary code by overwriting the EIP register via a 264-byte overflow. The attacker can inject shellcode into memory and use an egg hunter technique to locate and execute the payload when th...

8.6CVSS7AI score0.00183EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/24 11:27 a.m.•11 views

CVE-2019-25637 X-NetStat Pro 5.63 Local Buffer Overflow via EggHunter

X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload...

8.6CVSS7AI score0.00183EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
•added 2026/03/24 12:00 a.m.•27 views

VulnCheck KEV: CVE-2026-4001

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval in the processcustomformula function within includes/process/price.php. This is due to insufficient sanitization an...

9.8CVSS6.7AI score0.00989EPSS
SaveIn wildExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•2 views

CVE-2019-25637: Out-of-bounds Write

X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload...

8.6CVSS6.9AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•19 views

WordPress plugin Woocommerce Custom Product Addons Pro 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

9.8CVSS6.2AI score0.00989EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•42 views

Fresh X-NetStat Pro 缓冲区错误漏洞

Fresh X-NetStat Pro is a network connection status monitoring tool developed by Fresh Corporation. Version X-NetStat Pro 5.63 contains a buffer error vulnerability, which stems from a local buffer overflow. This vulnerability could allow local attackers to exploit the overflow in the 264-byte...

8.6CVSS6.5AI score0.00183EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•5 views

CVE-2026-4001: Improper Neutralization of Directives in Dynamically Evaluated Code

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval in the processcustomformula function within includes/process/price.php. This is due to insufficient sanitization an...

9.8CVSS6.5AI score0.00989EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/23 11:25 p.m.•47 views

CVE-2026-4001 Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval in the processcustomformula function within includes/process/price.php. This is due to insufficient sanitization an...

9.8CVSS0.00989EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/23 11:25 p.m.•11 views

CVE-2026-4001

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval in the processcustomformula function within includes/process/price.php. This is due to insufficient sanitization an...

9.8CVSS6.3AI score0.00989EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/23 11:25 p.m.•9 views

CVE-2026-4001 Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval in the processcustomformula function within includes/process/price.php. This is due to insufficient sanitization an...

9.8CVSS6.7AI score0.00989EPSS
SaveExploits0References2
Rows per page
Query Builder