Lucene search
K

85 matches found

Patchstack
Patchstack
added 2026/05/01 9:30 a.m.3 views

WordPress Post List Designer – Category Post, Recent Post, Post List plugin <= 3.3.7 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Posts List Designer by Category – List Category Posts Or Recent Posts versions = 3.3.7...

6.1CVSS5.8AI score0.00135EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/01 5:32 a.m.3 views

CVE-2025-49354

Cross-Site Request Forgery CSRF vulnerability in Mindstien Technologies Recent Posts From Each Category recent-posts-from-each-category allows Stored XSS.This issue affects Recent Posts From Each Category: from n/a through = 1.4...

7.1CVSS5.9AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 6:15 a.m.1 views

CVE-2025-49354

Cross-Site Request Forgery CSRF vulnerability in Mindstien Technologies Recent Posts From Each Category recent-posts-from-each-category allows Stored XSS.This issue affects Recent Posts From Each Category: from n/a through = 1.4...

7.1CVSS0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 5:30 a.m.1 views

EUVD-2025-205880

Cross-Site Request Forgery CSRF vulnerability in Mindstien Technologies Recent Posts From Each Category allows Stored XSS.This issue affects Recent Posts From Each Category: from n/a through 1.4...

7.1CVSS6.1AI score0.00015EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/31 5:30 a.m.22 views

CVE-2025-49354 WordPress Recent Posts From Each Category plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mindstien Technologies Recent Posts From Each Category recent-posts-from-each-category allows Stored XSS.This issue affects Recent Posts From Each Category: from n/a through = 1.4...

7.1CVSS0.00015EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 5:30 a.m.4 views

CVE-2025-49354

Technical details for CVE-2025-49354 are not provided in the supplied documents; no product, vendor, impact, or remediation specifics are disclosed here. Monitor for official updates.

7.1CVSS5.9AI score0.00015EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.1 views

PT-2025-54280

Name of the Vulnerable Software and Affected Versions Mindstien Technologies Recent Posts From Each Category versions 1.4 and earlier Description The Recent Posts From Each Category plugin contains a Cross-Site Request Forgery CSRF issue and a Stored Cross-Site Scripting XSS issue. The CSRF flaw...

7.1CVSS4.9AI score0.00015EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.1 views

WordPress plugin Recent Posts From Each Category 跨站请求伪造漏洞

...

7.1CVSS6.8AI score0.00015EPSS
Exploits0References1
CNVD
CNVD
added 2025/10/31 12:0 a.m.2 views

WordPress Plugin ACF Recent Posts Widget Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ACF Recent Posts Widget, no...

5.4CVSS6AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/28 1:34 a.m.2 views

CVE-2025-62894

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...

6.5CVSS6AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/27 3:30 a.m.1 views

EUVD-2025-36044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...

5.5AI score0.0003EPSS
Exploits0References2
NVD
NVD
added 2025/10/27 2:15 a.m.1 views

CVE-2025-62894

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...

6.5CVSS0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:33 a.m.0 views

CVE-2025-62894 WordPress ACF Recent Posts Widget plugin <= 5.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...

6.5CVSS5.6AI score0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/10/27 1:33 a.m.4 views

CVE-2025-62894

The CVE-2025-62894 entry documents a Stored XSS vulnerability in the WordPress plugin “ACF Recent Posts Widget” (acf-recent-posts-widget), caused by improper input neutralization during web page generation. Affected versions are up to 5.9.3 (i.e.,

6.5CVSS5.6AI score0.0003EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/27 1:33 a.m.4 views

CVE-2025-62894 WordPress ACF Recent Posts Widget plugin <= 5.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...

6.5CVSS0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.1 views

WordPress plugin ACF Recent Posts Widget 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ACF Recent Posts Widget, no...

6.5CVSS6AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.2 views

PT-2025-43773

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magicoders ACF Recent Posts Widget acf-recent-posts-widget allows Stored XSS.This issue affects ACF Recent Posts Widget: from n/a through = 5.9.3...

5.4CVSS6AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-39079

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.0011EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-31359

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00129EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27144

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00066EPSS
Exploits0References4
Rows per page
Query Builder