Lucene search
+L

28045 matches found

CNVD
CNVD
added 2025/07/30 12:0 a.m.7 views

WordPress Voltax Video Player Cross-Site Scripting Vulnerability

WordPress Voltax Video Player is a video plugin for the WordPress platform, developed by Minute Media, which is mainly used to embed videos and playlists from Minute Media's online video platform into WordPress websites. WordPress Voltax Video Player suffers from a cross-site scripting...

6.4CVSS6.3AI score0.00298EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/07/29 11:49 p.m.6 views

SUSE CVE-2015-5564

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...

10CVSS8.1AI score0.06744EPSS
SaveExploits0References3
Gitee
Gitee
added 2025/07/27 4:27 a.m.120 views

Exploit for Use After Free in Adobe Flash_Player

APTREPORT collected by @blackorbird https://x.com/blackorbird Interesting apt report & sample & malware & technology & intellegence collection APT Group for country Threat Actor Groups Tracked by Palo Alto Networks Unit 42...

9.8CVSS7.2AI score0.89532EPSS
SaveExploits19
Gitee
Gitee
added 2025/07/27 4:2 a.m.117 views

Exploit for Use After Free in Adobe Flash_Player

CobaltStrike-Toolset Aggressor Script, Kit, Malleable C2 Profiles, External C2 and so on - Kits - ResourceKit - ExploitKit - Aggressor Script - chromedumpmimikatz.cna - nopowershell - SMBexecpsh Further Resources nopowershell smbexecpsh.cna CVE-2018-15982...

10CVSS7.2AI score0.82456EPSS
SaveExploits14
RedhatCVE
RedhatCVE
added 2025/07/26 9:34 a.m.19 views

CVE-2025-6539

The Voltax Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS6AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/24 10:15 a.m.9 views

CVE-2025-6539

The Voltax Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS0.00298EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/07/24 9:22 a.m.7 views

CVE-2025-6539 Voltax Video Player <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The Voltax Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS5.6AI score0.00298EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/24 9:22 a.m.13 views

CVE-2025-6539 Voltax Video Player <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The Voltax Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS0.00298EPSS
SaveExploits0References2
CVE
CVE
added 2025/07/24 9:22 a.m.33 views

CVE-2025-6539

CVE-2025-6539 concerns the WordPress plugin Voltax Video Player (versions up to 1.6.5). The vulnerability is a Stored Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher, en...

6.4CVSS5.5AI score0.00298EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/24 12:0 a.m.8 views

WordPress plugin Voltax Video Player 跨站脚本漏洞

WordPress Voltax Video Player is a video plugin for the WordPress platform, developed by Minute Media, which is mainly used to embed videos and playlists from Minute Media's online video platform into WordPress websites. WordPress Voltax Video Player suffers from a cross-site scripting...

6.4CVSS6.2AI score0.00298EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/07/24 12:0 a.m.7 views

PT-2025-30651 · WordPress · Voltax Video Player

Name of the Vulnerable Software and Affected Versions: Voltax Video Player versions prior to 1.6.6 Description: The Voltax Video Player plugin for WordPress is susceptible to Stored Cross-Site Scripting through the id parameter. Insufficient input sanitization and output escaping allow...

6.4CVSS5.8AI score0.00298EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/23 10:41 p.m.3 views

MAL-2025-6300 Malicious code in player-component (npm)

The package communicates with a domain associated with malicious activity...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/23 10:41 p.m.5 views

Malicious code in player-component (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
Patchstack
Patchstack
added 2025/07/23 12:24 p.m.14 views

WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Responsive HTML5 Audio Player PRO With Playlist versions = 3.5.8...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2025/07/23 12:0 a.m.8 views

WordPress Easy Video Player Wordpress & WooCommerce Path Traversal Vulnerability

WordPress Easy Video Player Wordpress&WooCommerce is a responsive video player plugin designed for WordPress and WooCommerce, supporting local video playback, cloud platform video streaming, 360 degree video and virtual reality playback. WordPress Easy Video Player Wordpress&WooCommerce suffers...

7.5CVSS6.6AI score0.00475EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/23 12:0 a.m.6 views

WordPress HTML5 Radio Player-WPBakery Page Builder Addon Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress HTML5 Radio Player-WPBakery Page Builder Addon, which stems from improperly restricted pathnames, and no detailed...

7.5CVSS6.7AI score0.00475EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/07/22 12:12 p.m.8 views

WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Anhchangmutrang in WordPress Plugin Elite Video Player versions = 10.0.5...

7.1CVSS6AI score0.00244EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/18 11:54 a.m.20 views

CVE-2025-28955

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in FWDesign Easy Video Player Wordpress & WooCommerce fwdevp allows Path Traversal.This issue affects Easy Video Player Wordpress & WooCommerce: from n/a through = 10.0...

7.5CVSS5.9AI score0.00475EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 11:54 a.m.10 views

CVE-2025-31070

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg-cleverbakery allows Path Traversal.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a through = 2.5...

7.5CVSS5.9AI score0.00475EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/07/17 11:13 a.m.12 views

WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability

WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support = 3.5.4 - Cross Site Scripting XSS Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support versions = 3.5.4...

7.1CVSS6AI score0.00243EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder