Lucene search
+L

530 matches found

RedhatCVE
RedhatCVE
added 2025/12/14 4:06 a.m.17 views

CVE-2025-14477

The 404 Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This is due to improper sanitization of the filterText paramet...

4.9CVSS7AI score0.00359EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/13 3:20 a.m.6 views

CVE-2025-14477 404 Solution <= 3.1.0 - Authenticated (Admin+) SQL Injection via 'filterText' Parameter

The 404 Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This is due to improper sanitization of the filterText paramet...

4.9CVSS6.5AI score0.00359EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/13 12:00 a.m.11 views

WordPress plugin 404 Solution SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin 404...

4.9CVSS7.6AI score0.00359EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/13 12:00 a.m.15 views

PT-2025-51049

The 404 Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This is due to improper sanitization of the filterText paramet...

4.9CVSS7AI score0.00359EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/12/13 12:00 a.m.17 views

PT-2025-51077

Name of the Vulnerable Software and Affected Versions Extensive VC Addons for WPBakery page builder plugin for WordPress versions prior to 1.9.2 Description The software is susceptible to a Local File Inclusion issue due to insufficient path normalization and validation of the shortcode name...

8.1CVSS7.5AI score0.00627EPSS
SaveExploits0References11
Patchstack
Patchstack
added 2025/11/26 6:26 a.m.18 views

WordPress Sneeit Framework plugin <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback vulnerability

Unauthenticated Remote Code Execution in sneeitarticlespaginationcallback vulnerability discovered by Tonn in WordPress Plugin Sneeit Framework versions = 8.3...

9.8CVSS7.5AI score0.76138EPSS
SaveExploits3References1Affected Software1
NVD
NVD
added 2025/11/25 3:15 a.m.31 views

CVE-2025-6389

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

9.8CVSS0.76138EPSS
SaveExploits3References2
CVE
CVE
added 2025/11/25 2:26 a.m.89 views

CVE-2025-6389

The CVE-2025-6389 issue affects the WordPress Sneeit Framework plugin (versions

9.8CVSS6.7AI score0.76138EPSS
SaveIn wildExploits3References2
Cvelist
Cvelist
added 2025/11/25 2:26 a.m.37 views

CVE-2025-6389 Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

9.8CVSS0.76138EPSS
SaveExploits3References2
VulnCheck KEV
VulnCheck KEV
added 2025/11/25 12:00 a.m.16 views

VulnCheck KEV: CVE-2025-6389

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

9.8CVSS6.1AI score0.76138EPSS
SaveIn wildExploits3References6
EUVD
EUVD
added 2025/11/24 11:42 p.m.9 views

EUVD-2025-199316

Malicious code in @fishingbooker/react-pagination npm...

6.6AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 11:42 p.m.10 views

Malicious code in @fishingbooker/react-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1150699fbdbd82b14aab4463da75ae2d2bb7b4a64d01d48f98bef2f8243715 The package @fishingbooker/react-pagination was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2010-5059

Malware in sbrugna...

4.3CVSS6.4AI score0.01647EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-0441

Malware in sbrugna...

6.4CVSS6.2AI score0.01508EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2017-9643

Malware in sbrugna...

6.1CVSS6.2AI score0.01688EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2017-0195

Malware in sbrugna...

4.3CVSS8.6AI score0.02209EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2019-16867

Malware in sbrugna...

6.1CVSS6.2AI score0.01283EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2006-3620

Malware in sbrugna...

5CVSS6.3AI score0.01184EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-1502

Malicious code in bioql PyPI...

6.6CVSS6.4AI score0.00595EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2023-38157

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder