Lucene search
+L

1917 matches found

Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•7 views

CVE-2025-52743 WordPress oik-privacy-policy plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik-privacy-policy oik-privacy-policy allows Reflected XSS.This issue affects oik-privacy-policy: from n/a through = 1.4.10...

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•23 views

CVE-2025-52743 WordPress oik-privacy-policy plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik-privacy-policy oik-privacy-policy allows Reflected XSS.This issue affects oik-privacy-policy: from n/a through = 1.4.10...

7.1CVSS0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•13 views

PT-2025-43234

Name of the Vulnerable Software and Affected Versions bobbingwide oik-privacy-policy versions through 1.4.9 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting condition. This allows for the...

7.1CVSS6.7AI score0.0025EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•1 views

CVE-2025-52743: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik-privacy-policy oik-privacy-policy allows Reflected XSS.This issue affects oik-privacy-policy: from n/a through = 1.4.10...

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•14 views

WordPress plugin oik-privacy-policy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.0025EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-12018

Malware in sbrugna...

5.4CVSS6AI score0.006EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-51438

Malicious code in bioql PyPI...

6.1CVSS8.7AI score0.00581EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-7943

Malicious code in bioql PyPI...

7.1CVSS9AI score0.00179EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-51919

Malicious code in bioql PyPI...

8.8CVSS9.2AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-25289

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.0025EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-34886

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00126EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/20 10:33 a.m.•39 views

CVE-2025-8565

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the wplpgdprinstallpluginajaxhandler function in all versions up to, and including, 3.4.3...

8.1CVSS5.3AI score0.00275EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/18 10:15 a.m.•60 views

CVE-2025-8565

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the wplpgdprinstallpluginajaxhandler function in all versions up to, and including, 3.4.3...

8.1CVSS0.00275EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/18 9:31 a.m.•42 views

CVE-2025-8565

CVE-2025-8565 affects the WordPress plugin Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin: WP Legal Pages. The vulnerability is a missing capability check in wplp_gdpr_install_plugin_ajax_handler() that exists in all versions up to and including 3.4.3. This allows authent...

8.1CVSS4.9AI score0.00275EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/18 9:31 a.m.•19 views

CVE-2025-8565 Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the wplpgdprinstallpluginajaxhandler function in all versions up to, and including, 3.4.3...

8.1CVSS4.8AI score0.00275EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/18 9:31 a.m.•63 views

CVE-2025-8565 Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the wplpgdprinstallpluginajaxhandler function in all versions up to, and including, 3.4.3...

8.1CVSS0.00275EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•25 views

CVE-2025-49413

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in highwarden Super Store Finder superstorefinder-wp allows Reflected XSS.This issue affects Super Store Finder: from n/a through = 7.6...

7.1CVSS5.9AI score0.0025EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 8:15 a.m.•23 views

CVE-2025-49413

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in highwarden Super Store Finder superstorefinder-wp allows Reflected XSS.This issue affects Super Store Finder: from n/a through = 7.6...

7.1CVSS0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 8:03 a.m.•46 views

CVE-2025-49413 WordPress Super Store Finder Plugin <= 7.6 - Reflected Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in highwarden Super Store Finder superstorefinder-wp allows Reflected XSS.This issue affects Super Store Finder: from n/a through = 7.6...

7.1CVSS0.0025EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/20 8:03 a.m.•51 views

CVE-2025-49413

CVE-2025-49413 affects the WordPress plugin “Super Store Finder” (WP plugin by highwarden) versions up to and including 7.6. It is a reflected XSS caused by improper neutralization of input during web page generation. The CVSS 3.1 base vector indicates Network attack, no privileges required, user...

7.1CVSS5.9AI score0.0025EPSS
SaveExploits0References1
Rows per page
Query Builder