Lucene search
+L

34 matches found

Kitploit
Kitploit
β€’added 2026/08/24 2:10 a.m.β€’4 views

puppeteer-extra

puppeteer-extra Questo è il monorepo per puppeteer-extra, un framework modulare per plugin per puppeteer. :- 🌟 Per la documentazione principale, consulta il pacchettopuppeteer-extra. Abbiamo anche recentemente introdotto il supporto per Playwright; se ti interessa, dai un'occhiata a...

5.4AI score
SaveExploits0References4
NVD
NVD
β€’added 2026/07/13 10:16 a.m.β€’10 views

CVE-2026-57365

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hitesh Chandwani reCAPTCHA v2 & v3 for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This issue affects reCAPTCHA v2 & v3 for Asgaros Forum: from n/a through = 1.1.0...

6.5CVSS0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2026/07/13 8:41 a.m.β€’40 views

CVE-2026-57365 WordPress reCAPTCHA (v2 & v3) for Asgaros Forum plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hitesh Chandwani reCAPTCHA v2 & v3 for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This issue affects reCAPTCHA v2 & v3 for Asgaros Forum: from n/a through = 1.1.0...

6.5CVSS0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
β€’added 2026/06/09 9:39 a.m.β€’18 views

WordPress Advanced Google reCAPTCHA plugin <= 5.38 - Authenticated (Subscriber+) Authentication Bypass vulnerability

Authenticated Subscriber+ Authentication Bypass vulnerability discovered by Nguyen Ngoc Duc duc193 in WordPress Plugin Advanced Google reCAPTCHA versions = 5.38...

8.8CVSS5.5AI score0.00539EPSS
SaveExploits1References1Affected Software1
CVE
CVE
β€’added 2026/05/28 3:27 a.m.β€’52 views

CVE-2026-2374

The CVE-2026-2374 entry applies to the Login No Captcha reCAPTCHA WordPress plugin (v &lt;= 1.8.0). The vulnerability is a Stored Cross-Site Scripting (XSS) that occurs because authenticate() stores the unsanitized basename($_SERVER['PHP_SELF']) output in the login_nocaptcha_error WordPress optio...

7.2CVSS6AI score0.00346EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
β€’added 2026/05/28 3:27 a.m.β€’21 views

CVE-2026-2374

The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the $SERVER'PHPSELF' superglobal in all versions up to, and including, 1.8.0. This is due to the authenticate function storing the unsanitized output of basename$SERVER'PHPSELF' in the...

7.2CVSS6AI score0.00346EPSS
SaveExploits0References8
Patchstack
Patchstack
β€’added 2026/04/24 12:09 a.m.β€’12 views

WordPress WP reCaptcha by WebDesignBy plugin < 2.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Mustafa Ahmed in WordPress Plugin reCaptcha by WebDesignBy versions 2.0...

3.5CVSS5.8AI score0.002EPSS
SaveExploits0References1Affected Software1
NVD
NVD
β€’added 2026/04/23 7:16 a.m.β€’21 views

CVE-2026-4512

The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputting it in a JavaScript string context via the grecaptchajs function. This allows administrators on multisite installations who do not have the unfilteredhtml capability to injec...

3.5CVSS0.002EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
β€’added 2026/04/23 6:00 a.m.β€’7 views

CVE-2026-4512

The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputting it in a JavaScript string context via the grecaptchajs function. This allows administrators on multisite installations who do not have the unfilteredhtml capability to injec...

5.9AI score0.002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
β€’added 2026/04/23 12:00 a.m.β€’32 views

PT-2026-34643

Name of the Vulnerable Software and Affected Versions reCaptcha by WebDesignBy WordPress plugin versions prior to 2.0 Description The plugin fails to sanitize or escape the Site Key setting before it is output within a JavaScript string context through the grecaptcha js function. This allows...

3.5CVSS6AI score0.002EPSS
SaveExploits0References4
EUVD
EUVD
β€’added 2025/10/03 8:07 p.m.β€’7 views

EUVD-2024-32507

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00381EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
β€’added 2025/09/27 8:44 a.m.β€’10 views

CVE-2025-60177

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rozx Recaptcha - wp recaptcha-wp allows Stored XSS.This issue affects Recaptcha - wp: from n/a through = 0.2.6...

5.9CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Patchstack
Patchstack
β€’added 2025/09/26 10:04 a.m.β€’11 views

WordPress Recaptcha – wp Plugin <= 0.2.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Recaptcha wp versions = 0.2.6...

5.9CVSS6AI score0.00182EPSS
SaveExploits0Affected Software1
CVE
CVE
β€’added 2025/09/26 8:32 a.m.β€’17 views

CVE-2025-60177

CVE-2025-60177 describes a Stored XSS in the Recaptcha – wp WordPress plugin. Affected: Recaptcha – wp from n/a through 0.2.6. Root cause: improper neutralization of input during web page generation. Impact per CVSS: Confidentiality/Integrity/Availability Low, but attacker requires High privilege...

5.9CVSS5.2AI score0.00182EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2025/09/26 8:32 a.m.β€’6 views

CVE-2025-60177 WordPress Recaptcha – wp Plugin <= 0.2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rozx Recaptcha – wp recaptcha-wp allows Stored XSS.This issue affects Recaptcha – wp: from n/a through = 0.2.6...

5.9CVSS5.2AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2025/09/26 8:32 a.m.β€’22 views

CVE-2025-60177 WordPress Recaptcha – wp Plugin <= 0.2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rozx Recaptcha – wp recaptcha-wp allows Stored XSS.This issue affects Recaptcha – wp: from n/a through = 0.2.6...

5.9CVSS0.00182EPSS
SaveExploits0References1
NVD
NVD
β€’added 2025/09/12 6:15 a.m.β€’9 views

CVE-2025-8280

The Contact Form 7 reCAPTCHA WordPress plugin through 1.2.0 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

5.8CVSS0.00202EPSS
SaveExploits1References1
CVE
CVE
β€’added 2025/09/12 6:00 a.m.β€’34 views

CVE-2025-8280

CVE-2025-8280 concerns the WordPress plugin β€œContact Form 7 reCAPTCHA” up to version 1.2.0. It reports a Reflected Cross-Site Scripting (XSS) flaw caused by failure to escape the $_SERVER['REQUEST_URI'] value before echoing it into an HTML attribute. This can allow an attacker to inject arbitrary...

5.8CVSS5.7AI score0.00202EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
β€’added 2025/09/12 6:00 a.m.β€’17 views

CVE-2025-8280 Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']

The Contact Form 7 reCAPTCHA WordPress plugin through 1.2.0 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

0.00202EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
β€’added 2025/09/12 12:00 a.m.β€’11 views

PT-2025-37295

Name of the Vulnerable Software and Affected Versions: Contact Form 7 reCAPTCHA WordPress plugin versions through 1.2.0 Description: The plugin does not escape the $ SERVER'REQUEST URI' parameter before outputting it, potentially leading to Reflected Cross-Site Scripting in older web browsers...

5.8CVSS5.4AI score0.00202EPSS
SaveExploits1References9
Rows per page
Query Builder