Lucene search
+L

25771 matches found

Cvelist
Cvelist
•added 2025/08/20 8:03 a.m.•32 views

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

9.8CVSS0.00367EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/08/20 8:03 a.m.•10 views

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro: from n/a through n/a...

9.8CVSS5.8AI score0.00367EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/08/20 8:02 a.m.•16 views

CVE-2025-54032 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro allows Reflected XSS. This issue affects Real Estate Manager Pro: from n/a through 12.7.3...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 8:02 a.m.•30 views

CVE-2025-54032 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through = 12.7.3...

7.1CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 8:02 a.m.•29 views

CVE-2025-54056 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.8...

7.1CVSS0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•8 views

CVE-2025-54032: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through = 12.7.3...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•18 views

Number withdrawal

Emlog Pro is an Emlog open source blogging system. A security vulnerability exists in Emlog Pro 2.5.18 and earlier versions, which stems from improper handling of file uploads and could lead to unlimited uploads...

6.6AI score0.00066EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•18 views

WordPress plugin Real Estate Manager Pro has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A security vulnerability...

7.1CVSS5.5AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•9 views

CVE-2025-48162: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Reflected XSS.This issue affects Simple Business Directory Pro: from n/a through = 15.5.1...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•11 views

CVE-2025-53580: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

9.8CVSS5.8AI score0.00367EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•23 views

WordPress plugin Simple Business Directory Pro has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.1CVSS5.5AI score0.00228EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•9 views

CVE-2025-54056: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.8...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•23 views

PT-2025-33989 · Unknown · Simple Business Directory Pro

Name of the Vulnerable Software and Affected Versions: Simple Business Directory Pro affected versions not specified Description: An incorrect privilege assignment issue exists in Simple Business Directory Pro, allowing for privilege escalation. Recommendations: At the moment, there is no...

9.8CVSS6.2AI score0.00367EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•22 views

PT-2025-34036

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions through 2.5.18 Description: A weakness has been identified that allows for unrestricted file upload. This issue affects the processing of the file /admin/media.php?action=upload&sid=0. Manipulation of the File argument can...

9.8CVSS6.2AI score0.00066EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•17 views

WordPress plugin Simple Business Directory Pro has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

9.8CVSS5.9AI score0.00367EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2025/08/19 11:21 a.m.•23 views

WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Simple Business Directory Pro versions 15.6.9...

9.8CVSS6.7AI score0.00367EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/17 7:12 a.m.•65 views

CVE-2025-6679

The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote co...

9.8CVSS8.3AI score0.00812EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/08/16 11:22 p.m.•11 views

SUSE CVE-2025-38548

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Validate the size of the received input buffer Add bufferrecvsize to store the size of the received bytes. Validate bufferrecvsize in sendusbcmd...

5.5CVSS6AI score0.00173EPSS
SaveExploits0References20
RedhatCVE
RedhatCVE
•added 2025/08/16 7:23 p.m.•31 views

CVE-2025-53581

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artiosmedia RSS Feed Pro rss-feed-pro allows Stored XSS.This issue affects RSS Feed Pro: from n/a through = 1.1.8...

5.9CVSS5.9AI score0.00225EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/08/16 12:12 p.m.•380 views

Exploit for CVE-2025-6934

CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Desc...

9.8CVSS9.6AI score0.25367EPSS
SaveExploits12
Rows per page
Query Builder