Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

53 matches found

Vulnrichment
Vulnrichment•added 2026/08/01 8:32 a.m.•9 views

CVE-2026-15644 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00357EPSS
SaveExploits0References8
attackerkb
attackerkb•added 2026/08/01 7:49 a.m.•17 views

CVE-2026-15649

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment•added 2026/08/01 7:49 a.m.•10 views

CVE-2026-15649 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/08/01 7:49 a.m.•19 views

EUVD-2026-51764

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References6
Cvelist
Cvelist•added 2026/08/01 7:49 a.m.•48 views

CVE-2026-15649 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS0.00349EPSS
SaveExploits0References6
CVE
CVE•added 2026/08/01 7:49 a.m.•58 views

CVE-2026-15649

Technical details are not publicly available in the provided documents. Monitor for updates from authoritative sources for affected versions, impact, and remediation.

6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/08/01 7:49 a.m.•26 views

EUVD-2026-51747

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.7AI score0.00357EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment•added 2026/08/01 7:49 a.m.•10 views

CVE-2026-15645 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.7AI score0.00357EPSS
SaveExploits0References8
attackerkb
attackerkb•added 2026/08/01 7:49 a.m.•12 views

CVE-2026-15645

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.7AI score0.00357EPSS
SaveExploits0References9
Cvelist
Cvelist•added 2026/08/01 7:49 a.m.•45 views

CVE-2026-15645 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS0.00357EPSS
SaveExploits0References8
CVE
CVE•added 2026/08/01 7:49 a.m.•44 views

CVE-2026-15645

Powerkit

6.4CVSS5.7AI score0.00357EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies•added 2026/08/01 12:00 a.m.•22 views

PT-2026-67077

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.7AI score0.00357EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/01 12:00 a.m.•0 views

CVE-2026-15649: Improper Neutralization of Input During Web Page Generation

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS5.9AI score0.00349EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/08/01 12:00 a.m.•20 views

PT-2026-67078

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/01 12:00 a.m.•0 views

CVE-2026-15645: Improper Neutralization of Input During Web Page Generation

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.9AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/08/01 12:00 a.m.•19 views

PT-2026-67076

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00357EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/01 12:00 a.m.•0 views

CVE-2026-15644: Improper Neutralization of Input During Web Page Generation

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.9AI score0.00357EPSS
SaveExploits0References2
Patchstack
Patchstack•added 2026/07/31 7:55 p.m.•11 views

WordPress Powerkit – Supercharge your WordPress Site plugin <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Powerkit versions = 3.1.0...

6.4CVSS5.4AI score0.00357EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/07/31 7:47 p.m.•10 views

WordPress Powerkit – Supercharge your WordPress Site plugin <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Powerkit versions = 3.1.0...

6.4CVSS5.4AI score0.00349EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/07/31 12:00 a.m.•9 views

WordPress Powerkit – Supercharge your WordPress Site plugin <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Powerkit versions = 3.1.0...

6.4CVSS5.4AI score0.00357EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder