Lucene search
+L

90 matches found

Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.5 views

CVE-2025-68606 WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS6.5AI score0.00201EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.31 views

CVE-2025-68606 WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS0.00201EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.21 views

CVE-2025-68606

CVE-2025-68606 concerns Exposure of Sensitive System Information to an Unauthorized Actor in PostX (Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX). Wordfence lists this as an Unauthenticated Information Exposure affecting PostX up to version 5.0.3, with Patch Status Patche...

5.3CVSS6.5AI score0.00201EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/21 10:43 a.m.7 views

WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Doan Dinh Van in WordPress Plugin PostX versions = 5.0.3...

7.5CVSS7AI score0.00201EPSS
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/21 2:20 a.m.4 views

CVE-2025-12980 Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the '/ultp/v2/getdynamiccontent/' REST API endpoint in all versions up to, and including, 5.0.3. This makes it possible...

7.5CVSS5.1AI score0.00277EPSS
Exploits0References2
CVE
CVE
added 2025/12/21 2:20 a.m.32 views

CVE-2025-12980

CVE-2025-12980 affects the WordPress plugin Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX . The vulnerability is a Missing Authorization to Unauthenticated Sensitive Information Exposure via the REST endpoint /ultp/v2/get_dynamic_content/ in all versions up to 5.0.3, enabl...

7.5CVSS5.1AI score0.00277EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/21 12:0 a.m.13 views

PT-2025-52571

Name of the Vulnerable Software and Affected Versions PostX plugin for WordPress versions up to and including 5.0.3 Description The PostX plugin for WordPress is affected by a flaw that allows unauthorized access to data. A missing capability check on the /ultp/v2/get dynamic content/ REST API...

7.5CVSS6.1AI score0.00277EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.5 views

CVE-2025-54751

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 4.1.36...

7.1CVSS7AI score0.00219EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.8 views

CVE-2025-55707

Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through = 4.1.35...

7.2CVSS7AI score0.00353EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:21 a.m.3 views

CVE-2025-54751 WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 4.1.36...

6.6AI score0.00219EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 7:21 a.m.27 views

CVE-2025-55707 WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through = 4.1.35...

7.2CVSS0.00353EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.16 views

CVE-2025-55707

CVE-2025-55707 affects the WordPress PostX plugin (WPXPO PostX ultimate-post) with privilege escalation due to incorrect privilege assignment in versions up to 4.1.35. Multiple sources corroborate the vulnerability and indicate remediation is to update PostX to a version later than 4.1.35. The Re...

7.2CVSS6.6AI score0.00353EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 7:21 a.m.26 views

CVE-2025-54751 WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 4.1.36...

7.1CVSS0.00219EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.6 views

WordPress plugin PostX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.2CVSS6.7AI score0.00353EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.7 views

PT-2025-52051

Name of the Vulnerable Software and Affected Versions PostX versions through 4.1.35 Description An incorrect privilege assignment exists in WPXPO PostX ultimate-post, potentially allowing privilege escalation. Recommendations Update PostX to a version later than 4.1.35...

7.2CVSS6.7AI score0.00353EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-11571

Malware in sbrugna...

5.4CVSS5.6AI score0.0053EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-11573

Malware in sbrugna...

4.3CVSS4.9AI score0.00739EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-46463

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00326EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/09/02 4:55 p.m.8 views

WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abu Hurayra in WordPress Plugin PostX versions = 4.1.36...

7.1CVSS7AI score0.00219EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/08/29 7:17 p.m.9 views

WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by Denver Jackson in WordPress Plugin PostX versions = 4.1.35...

7.2CVSS6.9AI score0.00353EPSS
Exploits0Affected Software1
Rows per page
Query Builder