Lucene search
+L

11263 matches found

attackerkb
attackerkb
•added 2026/03/25 4:15 p.m.•6 views

CVE-2026-32544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue affects OOPSpam Anti-Spam: from n/a through = 1.2.62...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/25 4:15 p.m.•41 views

CVE-2026-32544 WordPress OOPSpam Anti-Spam plugin <= 1.2.62 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue affects OOPSpam Anti-Spam: from n/a through = 1.2.62...

7.1CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:15 p.m.•9 views

CVE-2026-32544 WordPress OOPSpam Anti-Spam plugin <= 1.2.62 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue affects OOPSpam Anti-Spam: from n/a through = 1.2.62...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•45 views

CVE-2026-32496 WordPress Spam Protect for Contact Form 7 plugin <= 1.2.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

6.8CVSS0.00536EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:14 p.m.•7 views

CVE-2026-32496 WordPress Spam Protect for Contact Form 7 plugin <= 1.2.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

5.9AI score0.00536EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:14 p.m.•38 views

CVE-2026-32496

CVE-2026-32496 is a path traversal vulnerability in the WordPress plugin Spam Protect for Contact Form 7 (wp-contact-form-7-spam-blocker). Affected: Spam Protect for Contact Form 7

6.8CVSS5.9AI score0.00536EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 3:22 p.m.•9 views

CVE-2026-3213 Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting XSS.This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0...

5.8AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 3:22 p.m.•33 views

CVE-2026-3213

The Drupal Anti-Spam by CleanTalk module (versions prior to 9.7.0 ) is vulnerable to a reflected Cross-site Scripting (XSS) attack. The root cause is the insufficient sanitization of user-supplied data during web page generation. While the vulnerability is limited in scope because the affected fu...

4.7CVSS5.8AI score0.00206EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/03/25 3:22 p.m.•17 views

CVE-2026-3213 Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting XSS.This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0...

4.7CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/03/25 3:22 p.m.•33 views

CVE-2026-3213 Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting XSS.This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0...

0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•20 views

WordPress plugin Spam Protect for Contact Form 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

6.8CVSS5.8AI score0.00536EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-32496: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

6.8CVSS5.8AI score0.00536EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•30 views

PT-2026-28057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue affects OOPSpam Anti-Spam: from n/a through = 1.2.62...

5.8AI score0.00251EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•24 views

Drupal Anti-Spam by CleanTalk 安全漏洞

Drupal Anti-Spam by CleanTalk is a security module for content management systems provided by the Drupal company, which offers automatic spam detection and filtering capabilities. Versions of Drupal Anti-Spam by CleanTalk prior to version 9.7.0 contained a security vulnerability caused by imprope...

4.7CVSS5.6AI score0.00206EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-32544: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XSS.This issue affects OOPSpam Anti-Spam: from n/a through = 1.2.62...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•35 views

WordPress plugin OOPSpam Anti-Spam 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•27 views

PT-2026-28010

Name of the Vulnerable Software and Affected Versions NYSL Spam Protect for Contact Form 7 versions through 1.2.9 Description The software contains a flaw related to improper limitation of a pathname to a restricted directory, also known as Path Traversal. This allows an attacker to potentially...

6.7CVSS5.9AI score0.00536EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-3213: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting XSS.This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0...

4.7CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/03/23 6:32 p.m.•16 views

WordPress Comment SPAM Wiper plugin <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'API Key' Setting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'API Key' Setting vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Comment SPAM Wiper versions = 1.2.1...

4.4CVSS5.8AI score0.003EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/03/23 12:13 p.m.•25 views

WordPress OOPSpam Anti-Spam plugin <= 1.2.62 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin OOPSpam Anti-Spam versions = 1.2.62...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder