Lucene search
+L

30 matches found

RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•16 views

CVE-2025-68581

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS7AI score0.00199EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/24 7:33 p.m.•15 views

WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin YITH Slider for page builders versions = 1.0.11...

8.1CVSS6.7AI score0.00199EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•18 views

EUVD-2025-205254

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

8.1CVSS6.5AI score0.00199EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•15 views

CVE-2025-68581

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 1:10 p.m.•8 views

CVE-2025-68581 WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS6AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 1:10 p.m.•29 views

CVE-2025-68581

Technical details about CVE-2025-68581 (affected product, version, impact, and fix) are not publicly provided in the supplied documents; monitor for updates.

5.4CVSS6AI score0.00199EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•45 views

CVE-2025-68581 WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•7 views

CVE-2025-68581: Missing Authorization

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS5.9AI score0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•14 views

PT-2025-53269

Name of the Vulnerable Software and Affected Versions YITH Slider for page builders versions through 1.0.11 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. Recommendations Update YITH Slider for page builders to a versi...

8.1CVSS6.5AI score0.00199EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•14 views

WordPress plugin YITH Slider for page builders 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.5AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/18 8:15 p.m.•29 views

CVE-2024-58318

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the rich text editor component for page and form builders. Attackers can exploit this vulnerability by entering malicious URIs, potentially allowing malicious scripts to execute in...

6.1CVSS0.0017EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/18 7:53 p.m.•40 views

CVE-2024-58318 Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSS

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the rich text editor component for page and form builders. Attackers can exploit this vulnerability by entering malicious URIs, potentially allowing malicious scripts to execute in...

6.1CVSS0.0017EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/18 7:53 p.m.•7 views

CVE-2024-58318 Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSS

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the rich text editor component for page and form builders. Attackers can exploit this vulnerability by entering malicious URIs, potentially allowing malicious scripts to execute in...

6.1CVSS5.9AI score0.0017EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•14 views

PT-2025-52325

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. This allows attackers to inject malicious scripts through the rich text editor component used in page and form...

6.1CVSS5.8AI score0.0017EPSS
SaveExploits0References4
CVE
CVE
•added 2024/11/28 9:47 a.m.•145 views

CVE-2024-8672

CVE-2024-8672 affects the WordPress plugin “Widget Options – The #1 WordPress Widget & Block Control Plugin” (versions

9.9CVSS9.6AI score0.43577EPSS
SaveExploits1References5
NVD
NVD
•added 2023/04/06 2:15 p.m.•26 views

CVE-2023-24374

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

6.5CVSS5.9AI score0.00383EPSS
SaveExploits0References1
OSV
OSV
•added 2023/04/06 2:15 p.m.•15 views

CVE-2023-24374

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

5.4CVSS6.1AI score0.00383EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/04/06 1:33 p.m.•37 views

CVE-2023-24374 WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

6.5CVSS6AI score0.00383EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/06 1:33 p.m.•52 views

CVE-2023-24374

Photon WP Material Design Icons for Page Builders plugin (versions

6.5CVSS5.3AI score0.00383EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/06 12:00 a.m.•4 views

CVE-2023-24374: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

6.5CVSS5.8AI score0.00383EPSS
SaveExploits0References2
Rows per page
Query Builder