127 matches found
WordPress Post Timeline Plugin < 2.2.6 - Cross-Site Scripting
The Post Timeline WordPress plugin before version 2.2.6 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape an invalid nonce before outputting it back in an AJAX response, which could allow attackers to execute arbitrary JavaScript code in an...
WordPress Product Addons & Fields for WooCommerce < 32.0.7 - Cross-Site Scripting
The Product Addons & Fields for WooCommerce WordPress plugin before version 32.0.7 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape some URL parameters in the admin panel, which could allow attackers to execute arbitrary JavaScript code in ...
Podcast Channels < 0.28 - Cross-Site Scripting
The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability. id: CVE-2014-4544 info: name: Podcast Channels 0.28 - Cross-Site Scripting author: daffainfo severity: medium description: The Podcast Channels WordPress plugin was...
WordPress WPAdverts plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ivaylo Atanassov in WordPress Plugin WPAdverts versions = 2.3.3...
CVE-2026-73351
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...
CVE-2026-66707 WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
RHCOS 4 : OpenShift Container Platform 4.6.59 (RHSA-2022:4947)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4947 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 - credentials: Stored XSS vulnerabilities in jenkin...
CVE-2016-10920
The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
CVE-2022-27213
Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...
CVE-2022-27200
Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...
EUVD-2014-8459
Malware in sbrugna...
EUVD-2019-6851
Malware in sbrugna...
EUVD-2017-9695
Malware in sbrugna...
EUVD-2021-11530
Malware in sbrugna...
EUVD-2015-9241
Malware in sbrugna...
EUVD-2018-13503
Malware in sbrugna...
EUVD-2019-3981
Malware in sbrugna...