Lucene search
+L

120 matches found

EUVD
EUVD
added 2025/12/15 2:25 p.m.14 views

EUVD-2025-203370

The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'childpages' shortcode in all versions up to, and including, 2.0.0. This is due to insufficient input sanitization and output escaping on four user-supplied attributes usecustomlink, usecustomlinktarget,...

6.4CVSS4.6AI score0.00176EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.11 views

WordPress plugin CC Child Pages 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.4CVSS5.8AI score0.00176EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/21 12:29 p.m.36 views

CVE-2025-66077 WordPress Legal Pages plugin <= 1.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Legal Pages: from n/a through = 1.4.6...

5.3CVSS0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/21 8:15 a.m.9 views

CVE-2025-11763

The Display Pages Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'columncount' parameter in the display-pages shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00222EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/21 12:00 a.m.9 views

WordPress plugin Legal Pages 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-5223

Malware in sbrugna...

8.8CVSS8.8AI score0.02867EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2018-11187

Malware in sbrugna...

6.1CVSS6.3AI score0.0155EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-9702

Malware in sbrugna...

9.1CVSS9.3AI score0.02503EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2021-24795

Malware in sbrugna...

8.1CVSS7.9AI score0.00492EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2015-4091

Malware in sbrugna...

3.5CVSS6.1AI score0.03947EPSS
SaveExploits6References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2015-4090

Malware in sbrugna...

6.5CVSS6.2AI score0.03779EPSS
SaveExploits5References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2013-6071

Malware in sbrugna...

7.5CVSS6.4AI score0.02486EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2008-6168

Malware in sbrugna...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-50745

Malicious code in bioql PyPI...

6.1CVSS8.7AI score0.00196EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/09/26 9:58 a.m.9 views

WordPress Map Categories to Pages Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Map Categories to Pages versions = 1.3.2...

5.9CVSS6.1AI score0.00225EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/26 8:31 a.m.2 views

CVE-2025-60146 WordPress Map Categories to Pages Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amit Verma Map Categories to Pages map-categories-to-pages allows Stored XSS.This issue affects Map Categories to Pages: from n/a through = 1.3.2...

5.9CVSS5.2AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.19 views

CVE-2025-60146

CVE-2025-60146 : A stored XSS in the WordPress plugin “Map Categories to Pages” (authenticated, Administrator user requirement) due to improper input neutralization during page generation. Affected versions are up to 1.3.2. The provided documents confirm the vulnerability exists and that exploita...

5.9CVSS5.9AI score0.00225EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.11 views

WordPress plugin Map Categories to Pages Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.7AI score0.00225EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/22 6:24 p.m.15 views

CVE-2025-57940 WordPress Append extensions on Pages Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Suresh Kumar Mukhiya Append extensions on Pages append-extensions-on-pages allows Stored XSS.This issue affects Append extensions on Pages: from n/a through = 1.1.2...

5.9CVSS0.00296EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:24 p.m.14 views

CVE-2025-57940

CVE-2025-57940 affects the WordPress plugin Append extensions on Pages (vulnerable up to and including 1.1.2). The issue is due to improper input neutralization during web page generation, enabling stored XSS (Cross-Site Scripting) when data is stored and later rendered. Product: Append extension...

5.9CVSS5.9AI score0.00296EPSS
SaveExploits0References1
Rows per page
Query Builder