Lucene search
+L

311 matches found

NVD
NVD
added 2025/03/31 1:15 p.m.9 views

CVE-2025-31570

Cross-Site Request Forgery CSRF vulnerability in wp-buy Related Posts Widget with Thumbnails advanced-css3-related-posts-widget allows Stored XSS.This issue affects Related Posts Widget with Thumbnails: from n/a through = 1.2...

7.1CVSS0.00135EPSS
Exploits0References1
CVE
CVE
added 2025/03/31 12:55 p.m.56 views

CVE-2025-31570

CVE-2025-31570 involves a CSRF to Stored XSS in the WordPress plugin “Related Posts Widget with Thumbnails” (listed as Advanced CSS3 Related Posts Widget). Public description states the issue affects the plugin from version n/a up to 1.2, implying all releases ≤1.2 are affected. The CVSS metrics ...

7.1CVSS7.2AI score0.00135EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/31 12:55 p.m.21 views

CVE-2025-31570 WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in wp-buy Related Posts Widget with Thumbnails advanced-css3-related-posts-widget allows Stored XSS.This issue affects Related Posts Widget with Thumbnails: from n/a through = 1.2...

7.1CVSS0.00135EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/26 2:23 p.m.9 views

CVE-2025-30602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...

7.1CVSS7.2AI score0.00278EPSS
Exploits0References1
NVD
NVD
added 2025/03/24 2:15 p.m.19 views

CVE-2025-30602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...

7.1CVSS0.00278EPSS
Exploits0References1
CVE
CVE
added 2025/03/24 1:47 p.m.66 views

CVE-2025-30602

CVE-2025-30602 is a stored XSS in the WordPress plugin Related Posts via Categories (vulnerable up to 2.1.2; root cause: improper input neutralization during web page generation). Impact is cross-site scripting (low- to high-impact user data/session risk per CVSS 3.1: HIGH, 7.1). No exploitation ...

7.1CVSS7.2AI score0.00278EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/24 1:4 p.m.6 views

WordPress Related Posts via Categories plugin <= 2.1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Related Posts via Categories versions = 2.1.2...

7.1CVSS6.2AI score0.00278EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/03/06 11:53 p.m.5 views

WordPress Related Post plugin <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Related Post versions 2.0.59...

6.1CVSS5.9AI score0.00178EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.5 views

WordPress plugin wumii-related-posts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.5AI score0.00224EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/15 2:23 p.m.12 views

CVE-2025-26545

Cross-Site Request Forgery CSRF vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-up-exactry-by-milliard allows Stored XSS.This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through = 0.0.22...

7.1CVSS7.2AI score0.00141EPSS
Exploits0References1
NVD
NVD
added 2025/02/13 2:16 p.m.17 views

CVE-2025-26545

Cross-Site Request Forgery CSRF vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-up-exactry-by-milliard allows Stored XSS.This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through = 0.0.22...

7.1CVSS0.00141EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/13 1:52 p.m.21 views

CVE-2025-26545 WordPress Related Posts Line-up-Exactly by Milliard plugin <= 0.0.22 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-up-exactry-by-milliard allows Stored XSS.This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through = 0.0.22...

7.1CVSS0.00141EPSS
Exploits0References1
CVE
CVE
added 2025/02/13 1:52 p.m.66 views

CVE-2025-26545

CVE-2025-26545 affects the WordPress plugin Related Posts Line-up-Exactly by Milliard (versions ≤ 0.0.22). The entry documents a CSRF vulnerability that enables a Stored XSS condition. The issue is triggered when an authenticated user performs a request, allowing injected script code to be stored...

7.1CVSS7.2AI score0.00141EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/13 12:47 p.m.8 views

WordPress Related Posts Line-up-Exactly by Milliard plugin <= 0.0.22 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Related Posts Line-up-Exactly by Milliard versions = 0.0.22...

7.1CVSS6.2AI score0.00141EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/09 10:19 a.m.6 views

CVE-2025-25123

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

7.1CVSS7.2AI score0.0015EPSS
Exploits0References1
NVD
NVD
added 2025/02/07 10:15 a.m.11 views

CVE-2025-25123

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

7.1CVSS0.0015EPSS
Exploits0References1
CVE
CVE
added 2025/02/07 10:11 a.m.43 views

CVE-2025-25123

CVE-2025-25123 maps to a WordPress plugin issue: Easy Related Posts, affected versions are

7.1CVSS7.2AI score0.0015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/07 10:11 a.m.9 views

CVE-2025-25123 WordPress Easy Related Posts plugin <= 2.0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts allows Stored XSS. This issue affects Easy Related Posts: from n/a through 2.0.2...

7.1CVSS6.8AI score0.0015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:56 a.m.8 views

CVE-2025-23476

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

7.1CVSS7.2AI score0.002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:13 a.m.10 views

CVE-2024-32549

Cross-Site Request Forgery CSRF vulnerability in Microkid Related Posts for WordPress allows Cross-Site Scripting XSS.This issue affects Related Posts for WordPress: from n/a through 4.0.3...

7.1CVSS5.1AI score0.00253EPSS
Exploits0References1
Rows per page
Query Builder