Lucene search
+L

4989 matches found

Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.4 views

CVE-2025-63057 WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows DOM-Based XSS.This issue affects Wp Ultimate Review: from n/a through = 2.3.7...

6.5CVSS5.2AI score0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:52 p.m.44 views

CVE-2025-63057 WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows DOM-Based XSS.This issue affects Wp Ultimate Review: from n/a through = 2.3.7...

6.5CVSS0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.29 views

CVE-2025-63057

CVE-2025-63057 refers to a DOM-based XSS in the WordPress plugin WP Ultimate Review (Roxnor) affecting versions from and including up to 2.3.7. The vulnerability arises from improper input neutralization during web page generation, enabling cross-site scripting on pages rendered by the plugin. Pu...

6.5CVSS5.9AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.18 views

WordPress plugin Wp Ultimate Review 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/08 1:26 p.m.189 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Burp Passive Extension Passive Burp Suite exte...

10CVSS6.9AI score0.99802EPSS
SaveExploits391
Patchstack
Patchstack
added 2025/12/07 9:29 p.m.7 views

WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Wp Ultimate Review versions = 2.3.7...

8.2CVSS5.8AI score0.00245EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/07 7:52 a.m.27 views

CVE-2025-12499

The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions up to, and including, 6.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

7.2CVSS5.2AI score0.00383EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2025/12/01 2:00 p.m.19 views

Flock Uses Overseas Gig Workers to Build Its Surveillance AI

An accidental leak revealed that Flock, which has cameras in thousands of US communities, is using workers in the Philippines to review and classify footage...

7AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2025/11/24 12:00 a.m.14 views

WebKitGTK+: Multiple Vulnerabilities

Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Description Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE...

10CVSS7.2AI score0.03804EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2025/11/23 12:28 a.m.260 views

Exploit for CVE-2025-10230

CVE-2025-10230 CVE-2025-102...

10CVSS7.3AI score0.39653EPSS
SaveExploits2
Packet Storm News
Packet Storm News
added 2025/11/23 12:00 a.m.22 views

From Reviewers' Lens: Understanding Bug Bounty Report Invalid Reasons with LLMs

Bug bounty platforms e.g., HackerOne, BugCrowd leverage crowd-sourced vulnerability discovery to improve continuous coverage, reduce the cost of discovery, and serve as an integral complement to internal red teams. With the rise of AI-generated bug reports, little work exists to help bug hunters...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/22 12:34 p.m.16 views

CVE-2025-66063

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

5.4CVSS6.9AI score0.00241EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/21 1:15 p.m.9 views

CVE-2025-66063

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

5.4CVSS0.00241EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/21 12:29 p.m.21 views

CVE-2025-66063

WP Google Review Slider plugin (WordPress) is affected by CVE-2025-66063: a Missing Authorization / Broken Access Control vulnerability in versions up to 17.4 due to misconfigured access controls. Red Hat/NVD/Patchstack entries confirm the issue and indicate a patched status for affected releases...

5.4CVSS6.6AI score0.00241EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/21 12:29 p.m.13 views

EUVD-2025-198478

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

5.4CVSS6.5AI score0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/21 12:29 p.m.4 views

CVE-2025-66063 WordPress WP Google Review Slider plugin <= 17.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

5.4CVSS6.6AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/21 12:29 p.m.22 views

CVE-2025-66063 WordPress WP Google Review Slider plugin <= 17.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

5.4CVSS0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/21 12:00 a.m.7 views

WordPress plugin WP Google Review Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blogging sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/21 12:00 a.m.14 views

PT-2025-47738

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

7AI score0.00241EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/11/20 3:35 p.m.197 views

automated-security-code-review

...

7AI score
SaveExploits0
Rows per page
Query Builder