Lucene search
+L

75 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:22 p.m.•27 views

Malicious code in dolyame-boxy-independent-bnpl-picture-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2f5f635baa82fb1cc166956476dc3d7560c0c5d9e49a29aa4123256fdd9310 On require of the package, index.js unconditionally loads bootstrap.js, which selects a platform-specific endpoint and downloads an opaque binary fro...

5.6AI score
SaveExploits0References2
NVD
NVD
•added 2026/07/23 12:18 p.m.•9 views

CVE-2026-57696

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

7.1CVSS0.00409EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/23 11:18 a.m.•14 views

EUVD-2026-48171

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

7.1CVSS5.2AI score0.00409EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/23 11:18 a.m.•22 views

CVE-2026-57696

The CVE concerns the WordPress Picture Gallery plugin (WordPress plugin) with versions

7.1CVSS5.2AI score0.00409EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/23 11:18 a.m.•10 views

CVE-2026-57696 WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

7.1CVSS5.2AI score0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/23 11:18 a.m.•47 views

CVE-2026-57696 WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

7.1CVSS0.00409EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•23 views

PT-2026-63829

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

7.1CVSS5.2AI score0.00409EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•0 views

CVE-2026-57696: Improper Limitation of a Pathname to a Restricted Directory

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

7.1CVSS5.7AI score0.00409EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/07/20 6:49 a.m.•12 views

WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Picture Gallery versions = 1.6.5...

7.1CVSS5.3AI score0.00409EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/05/10 3:31 p.m.•26 views

EUVD-2021-34811

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

6.4CVSS5.7AI score0.00187EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/10 1:16 p.m.•52 views

CVE-2021-47951

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

6.4CVSS0.00187EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/10 12:52 p.m.•32 views

CVE-2021-47951

CVE-2021-47951 concerns WordPress Picture Gallery 1.4.2, which has a stored cross-site scripting (XSS) flaw. The vulnerability allows authenticated attackers to inject JavaScript through the Edit Content URL field in the Access Control settings; payloads stored in the database can execute when th...

6.4CVSS5.7AI score0.00187EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/10 12:52 p.m.•16 views

CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

6.4CVSS5.7AI score0.00187EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/10 12:52 p.m.•11 views

CVE-2021-47951

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

6.4CVSS5.7AI score0.00187EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/05/10 12:52 p.m.•64 views

CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

6.4CVSS0.00187EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/10 12:00 a.m.•0 views

CVE-2021-47951: Improper Neutralization of Input During Web Page Generation

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

6.4CVSS5.7AI score0.00187EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/10 12:00 a.m.•20 views

WordPress plugin Picture Gallery 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.6AI score0.00187EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•7 views

EUVD-2006-2119

Malware in sbrugna...

7.5CVSS6.4AI score0.01726EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-35029

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-8163

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00367EPSS
SaveExploits0References2
Rows per page
Query Builder