Lucene search
+L

14163 matches found

NVD
NVD
•added 2025/06/06 12:15 p.m.•28 views

CVE-2025-49076

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a...

6.5CVSS0.00203EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 12:15 p.m.•23 views

CVE-2025-48335

Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Plus: from n/a through = 3.2.0...

5.4CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 11:38 a.m.•60 views

CVE-2025-48335

CVE-2025-48335 concerns WordPress Responsive Plus plugin (versions

5.4CVSS5.9AI score0.00252EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 11:38 a.m.•55 views

CVE-2025-48335 WordPress Responsive Plus plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Plus: from n/a through = 3.2.0...

5.4CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 11:38 a.m.•14 views

CVE-2025-48335 WordPress Responsive Plus plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Plus: from n/a through = 3.2.0...

5.4CVSS5.1AI score0.00252EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 11:36 a.m.•33 views

CVE-2025-49076 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a...

6.5CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 11:36 a.m.•72 views

CVE-2025-49076

CVE-2025-49076 is a Stored Cross-Site Scripting (XSS) vulnerability affecting The Plus Addons for Elementor Page Builder Lite (WordPress plugin) up to version 6.2.7. The issue arises from improper input neutralization during web page generation. Public sources in the Connected documents confirm t...

6.5CVSS5.9AI score0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 11:36 a.m.•17 views

CVE-2025-49076 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 6.2.7...

6.5CVSS6.5AI score0.00203EPSS
SaveExploits0References1
osv_oesa
osv_oesa
•added 2025/06/06 11:08 a.m.•22 views

OESA-2025-1612 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce configured size...

7.5CVSS6.9AI score0.00663EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•7 views

CVE-2025-30990: Missing Authorization

Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through = 1.2.0...

5.4CVSS5.9AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•26 views

PT-2025-24178 · Buddydev · Buddydev Activity Plus Reloaded

Name of the Vulnerable Software and Affected Versions: BuddyDev Activity Plus Reloaded for BuddyPress versions 1.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

5.4CVSS5.2AI score0.0032EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•21 views

WordPress plugin Activity Plus Reloaded for BuddyPress has a security vulnerability

WordPress Activity Plus Reloaded for BuddyPress plugin is an extension plugin that provides additional functionality to the BuddyPress community plugin. WordPress Activity Plus Reloaded for BuddyPress plugin suffers from an authorization issue vulnerability that stems from a lack of authorization...

5.4CVSS6.8AI score0.0032EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•8 views

CVE-2025-48335: Missing Authorization

Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Plus: from n/a through = 3.2.0...

5.4CVSS5.9AI score0.00252EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/06/06 12:00 a.m.•24 views

Combating Reentrancy Bugs on Sharded Blockchains

Reentrancy is a well-known source of smart contract bugs on Ethereum, leading e.g. to double-spending vulnerabilities in DeFi applications. But less is known about this problem in other blockchains, which can have significantly different execution models. Sharded blockchains in particular general...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•8 views

CVE-2025-49076: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a...

6.5CVSS5.8AI score0.00203EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•23 views

PT-2025-24094 · Unknown · The Plus Addons For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor Page Builder Lite versions through 6.2.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

6.5CVSS6AI score0.00203EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•20 views

WordPress plugin The Plus Addons for Elementor Page Builder Lite has a cross-site scripting vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin The Plus...

6.5CVSS5.9AI score0.00203EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•8 views

CVE-2025-30957: Missing Authorization

Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Activity Plus Reloaded for BuddyPress: from n/a through = 1.1.2...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•19 views

PT-2025-24089 · Cyberchimps · Cyberchimps Responsive Plus

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Plus versions 3.2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

5.4CVSS5.2AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•19 views

WordPress Plugin Responsive Plus has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS5.5AI score0.00252EPSS
SaveExploits0References1
Rows per page
Query Builder