Lucene search
+L

54 matches found

RedhatCVE
RedhatCVE
added 2025/03/28 5:52 p.m.8 views

CVE-2025-27267

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Random Quotes random-quotes allows Reflected XSS.This issue affects Random Quotes: from n/a through = 1.3...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/26 3:16 p.m.9 views

CVE-2025-27267

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Random Quotes random-quotes allows Reflected XSS.This issue affects Random Quotes: from n/a through = 1.3...

7.1CVSS0.00363EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/26 2:24 p.m.51 views

CVE-2025-27267

CVE-2025-27267 concerns WordPress plugin Random Quotes (versions

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/26 2:24 p.m.7 views

CVE-2025-27267 WordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Random Quotes random-quotes allows Reflected XSS.This issue affects Random Quotes: from n/a through = 1.3...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/26 12:0 a.m.4 views

WordPress plugin Random Quotes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8.1AI score0.00363EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/20 10:33 a.m.5 views

WordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Random Quotes versions = 1.3...

7.1CVSS7.6AI score0.00363EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/15 4:45 a.m.26 views

CVE-2024-13580

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

4.3CVSS6.7AI score0.00164EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2025/03/11 7:16 a.m.6 views

WordPress XV Random Quotes plugin <= 2.6.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Bob Matyas in WordPress Plugin XV Random Quotes versions = 2.6.0...

4.3CVSS8.4AI score0.00164EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/03/11 7:15 a.m.9 views

WordPress XV Random Quotes plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin XV Random Quotes versions = 2.6.0...

7.1CVSS8.3AI score0.00263EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2025/03/11 6:15 a.m.17 views

CVE-2024-13580

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

4.3CVSS0.00164EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/11 6:0 a.m.6 views

CVE-2024-13580 XV Random Quotes <= 1.40 - Settings Reset via CSRF

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

4.3CVSS7.2AI score
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/11 6:0 a.m.19 views

CVE-2024-13580 XV Random Quotes <= 1.40 - Settings Reset via CSRF

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

0.00164EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/11 6:0 a.m.68 views

CVE-2024-13580

The CVE-2024-13580 vulnerability affects the XV Random Quotes WordPress plugin (

4.3CVSS7AI score0.00164EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/11 6:0 a.m.11 views

CVE-2024-13574 XV Random Quotes <= 1.40 - Reflected XSS

The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.4AI score0.00263EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/11 6:0 a.m.5 views

CVE-2024-13574 XV Random Quotes <= 1.40 - Reflected XSS

The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS7.2AI score
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/11 6:0 a.m.29 views

CVE-2024-13574 XV Random Quotes <= 1.40 - Reflected XSS

The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00263EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/11 6:0 a.m.55 views

CVE-2024-13574

CVE-2024-13574 – XV Random Quotes (WordPress) ≤ 1.40 : The vulnerability arises from insufficient sanitization/escaping of an input parameter before echoing it in the page, causing a reflected XSS that could target high-privilege users (e.g., admins). Public details about a fix/patch version are ...

7.1CVSS6.2AI score0.00263EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.4 views

WordPress plugin XV Random Quotes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.8AI score0.00164EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.8 views

WordPress plugin XV Random Quotes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.1CVSS8.2AI score0.00263EPSS
SaveExploits1References2
NVD
NVD
added 2025/03/03 2:15 p.m.7 views

CVE-2025-23883

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in unalignedcoder Stray Random Quotes stray-quotes allows Reflected XSS.This issue affects Stray Random Quotes: from n/a through = 1.9.9...

7.1CVSS0.00378EPSS
SaveExploits0References1
Rows per page
Query Builder