Lucene search
+L

2604 matches found

Patchstack
Patchstack
•added 2025/01/07 9:48 p.m.•15 views

WordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin BP Profile Shortcodes Extra versions = 2.6.0...

6.5CVSS6.1AI score0.00227EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/07 9:35 p.m.•13 views

WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Genesis Style Shortcodes versions = 1.0...

6.5CVSS6.1AI score0.00207EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/07 10:32 a.m.•9 views

WordPress Better User Shortcodes Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Better User Shortcodes versions = 1.0...

7.1CVSS6.1AI score0.00315EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2024-10536: Missing Authorization

The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleblockshortcodeexport function in all versions up to, and including, 6.0.0. This...

4.3CVSS5.7AI score0.00267EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/02 12:15 p.m.•19 views

CVE-2024-56242

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.14...

5.4CVSS7.3AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/02 12:15 p.m.•46 views

CVE-2024-56242

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.14...

6.5CVSS0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/02 12:15 p.m.•20 views

CVE-2023-46632

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3...

7.1CVSS0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 12:01 p.m.•43 views

CVE-2024-56242 WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.14...

6.5CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/02 12:01 p.m.•74 views

CVE-2024-56242

CVE-2024-56242 is a Stored XSS in Arconix Shortcodes for WordPress. The issue arises from improper input neutralization during web page generation, allowing attacker-controlled input to be rendered as executable script. Affected product: Arconix Shortcodes, affected versions listed as

6.5CVSS7.2AI score0.00254EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/02 12:00 p.m.•8 views

CVE-2023-46632 WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3...

7.1CVSS8.5AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 12:00 p.m.•23 views

CVE-2023-46632 WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3...

7.1CVSS0.00393EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•5 views

CVE-2024-56242: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.14...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•6 views

CVE-2023-46632: Missing Authorization

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•9 views

WordPress plugin My Shortcodes 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.1CVSS8.7AI score0.00393EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•18 views

PT-2025-1523 · Unknown · My Shortcodes

Name of the Vulnerable Software and Affected Versions: My Shortcodes versions 2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For My Shortcodes versions 2.3...

7.1CVSS9.4AI score0.00393EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•18 views

PT-2025-3208 · Unknown · Arconix Shortcodes

Name of the Vulnerable Software and Affected Versions: Arconix Shortcodes versions through 2.1.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

6.5CVSS9.1AI score0.00254EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•18 views

WordPress plugin Arconix Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/30 5:20 p.m.•10 views

WordPress AIO Shortcodes plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin AIO Shortcodes versions = 1.3...

7.1CVSS5.8AI score0.00334EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/12/30 4:07 p.m.•17 views

WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Arconix Shortcodes versions = 2.1.14...

6.5CVSS6.1AI score0.00254EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/12/30 11:15 a.m.•14 views

WordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Arconix Shortcodes versions = 2.1.15...

7.1CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder