Lucene search
+L

8 matches found

CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•20 views

WordPress plugin ShopBuilder – Elementor WooCommerce Builder Addons 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application add-on. There is a...

5.3CVSS5.8AI score0.00343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/03 7:07 a.m.•30 views

CVE-2025-13456

The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6.1AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/02 6:15 a.m.•25 views

CVE-2025-13456

The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/02 6:00 a.m.•9 views

CVE-2025-13456 Shopbuilder < 3.2.2 - Reflected XSS

The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

5.9AI score0.00221EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/02 6:00 a.m.•20 views

EUVD-2026-0705

The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.6AI score0.00221EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/02 6:00 a.m.•47 views

CVE-2025-13456

The ShopBuilder WordPress plugin (versions prior to 3.2.2 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of a parameter before it is output back onto the page. This vulnerability could be leveraged to target high-privilege us...

6.1CVSS5.9AI score0.00221EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/02 12:00 a.m.•22 views

PT-2026-1052

Name of the Vulnerable Software and Affected Versions ShopBuilder WordPress plugin versions prior to 3.2.2 Description The ShopBuilder WordPress plugin does not properly sanitize and escape a parameter before outputting it, resulting in a Reflected Cross-Site Scripting issue. This could potential...

6.1CVSS5.8AI score0.00221EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/05/13 9:21 a.m.•47 views

CVE-2024-34812 WordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through = 2.1.8...

5.3CVSS5.9AI score0.00585EPSS
SaveExploits0References1
Rows per page
Query Builder