Lucene search
+L

31 matches found

CVE
CVE
•added 2026/10/13 8:44 a.m.•4 views

CVE-2026-108179

The PluginUs.Net WOLF bulk-editor for WordPress, versions up to and including 1.1.1 , is susceptible to a Blind SQL Injection vulnerability. This issue stems from the Improper Neutralization of Special Elements used in an SQL command. An attacker with high privileges could potentially exploit thi...

7.6CVSS5.8AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/09 10:16 a.m.•10 views

CVE-2026-95608

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

7.1CVSS0.0018EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/09 10:00 a.m.•6 views

EUVD-2026-95597

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

7.1CVSS5.7AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/09 10:00 a.m.•21 views

CVE-2026-95608

The PluginUs.Net HUSKY woocommerce-products-filter WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 1.4.3.2 . An attacker could potentially execute ma...

7.1CVSS5.7AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/09 10:00 a.m.•43 views

CVE-2026-95608 WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

7.1CVSS0.0018EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•8 views

PT-2026-108845

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

7.1CVSS5.7AI score0.0018EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/07 10:20 a.m.•14 views

CVE-2026-27415

Cross-Site Request Forgery CSRF vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5...

4.3CVSS5.8AI score0.00142EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•7 views

CVE-2026-27415: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5...

4.3CVSS5.8AI score0.00142EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-22197

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00316EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-8522

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.00613EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:38 a.m.•20 views

CVE-2024-24834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net allows Stored XSS.This issue affects BEAR – Bulk Editor and Products Manager Professional for...

5.9CVSS6.5AI score0.00316EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/19 4:31 p.m.•19 views

WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin Active Products Tables for WooCommerce versions = 1.0.6.8...

6.5CVSS5.9AI score0.00209EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/14 5:51 p.m.•14 views

WordPress TableOn Plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin TableOn versions = 1.0.3...

7.1CVSS7.1AI score0.00288EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/04 1:34 p.m.•17 views

WordPress TableOn plugin <= 1.0.4.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata in WordPress Plugin TableOn versions = 1.0.4.4...

5.4CVSS8.5AI score0.00486EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/29 10:39 p.m.•43 views

CVE-2025-26890

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.6.4...

7.5CVSS5.9AI score0.00613EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 10:15 p.m.•23 views

CVE-2025-26890

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.6.4...

7.5CVSS0.00613EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/27 9:53 p.m.•42 views

CVE-2025-26890 WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.6.4...

7.5CVSS0.00613EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 9:53 p.m.•77 views

CVE-2025-26890

CVE-2025-26890 affects WordPress HUSKY plugin

7.5CVSS5.9AI score0.00613EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•7 views

PT-2025-13402

Name of the Vulnerable Software and Affected Versions PluginUs.Net HUSKY versions 1.3.6.4 and earlier Description The issue is related to improper control of filename for include/require statement in PHP program, also known as PHP Remote File Inclusion, which allows PHP Local File Inclusion...

7.5CVSS0.00613EPSS
SaveExploits0References6
NVD
NVD
•added 2024/04/10 8:15 p.m.•52 views

CVE-2024-31430

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional, realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional:...

8.8CVSS4.6AI score0.00224EPSS
SaveExploits0References2
Rows per page
Query Builder