Lucene search
+L

147 matches found

Cvelist
Cvelist
•added 2026/01/23 2:29 p.m.•48 views

CVE-2026-24587 WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS0.00297EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•9 views

CVE-2026-24587: Missing Authorization

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS6AI score0.00297EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•37 views

PT-2026-4424

Name of the Vulnerable Software and Affected Versions kutsy AJAX Hits Counter + Popular Posts Widget versions through 0.10.210305 Description An issue exists in kutsy AJAX Hits Counter + Popular Posts Widget related to incorrectly configured access control security levels, potentially allowing...

5.4CVSS5.8AI score0.00297EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•32 views

WordPress plugin AJAX Hits Counter + Popular Posts Widget security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.4CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/18 10:28 a.m.•22 views

WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin AJAX Hits Counter + Popular Posts Widget versions = 0.10.210305...

5.4CVSS5.4AI score0.00297EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/28 1:34 a.m.•21 views

CVE-2025-62900

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

6.5CVSS6AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/27 3:30 a.m.•23 views

EUVD-2025-36038

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

5.5AI score0.0021EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/27 2:15 a.m.•19 views

CVE-2025-62900

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

6.5CVSS0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/27 1:33 a.m.•29 views

CVE-2025-62900 WordPress Popular Posts by Webline plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

6.5CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/27 1:33 a.m.•27 views

CVE-2025-62900

CVE-2025-62900 is a stored cross-site scripting (XSS) vulnerability in the WordPress plugin “Popular Posts by Webline” (Webline popular-posts-by-webline) affecting versions up to and including 1.1.1. The issue is caused by improper neutralization of input during web page generation, enabling stor...

6.5CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/27 1:33 a.m.•8 views

CVE-2025-62900 WordPress Popular Posts by Webline plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

6.5CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•20 views

PT-2025-43779

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

5.4CVSS6AI score0.0021EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•22 views

WordPress plugin Popular Posts by Webline Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.7AI score0.0021EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-62900: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through = 1.1.1...

6.5CVSS5.8AI score0.0021EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-23448

Malware in sbrugna...

5.5CVSS6.1AI score0.00585EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-2931

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.0016EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2021-8160

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.01442EPSS
SaveExploits1References4
Patchstack
Patchstack
•added 2025/09/27 4:06 a.m.•23 views

WordPress Popular Posts by Webline plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Popular Posts by Webline versions = 1.1.1...

5.4CVSS6.1AI score0.0021EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:01 a.m.•19 views

CVE-2022-43468

External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted external inputs to update certain internal variables. As a result, the number of views for an article may be manipulate...

7.5CVSS6.4AI score0.0092EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:58 p.m.•24 views

CVE-2021-20746

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS5.9AI score0.01442EPSS
SaveExploits1References1
Rows per page
Query Builder