Lucene search
+L

2118 matches found

Vulnrichment
Vulnrichment
added 2025/10/15 5:23 a.m.6 views

CVE-2025-8561 Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS4.7AI score0.00216EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.13 views

PT-2025-42237

The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS5AI score0.00216EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.9 views

WordPress plugin TARIFFUXX SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress TARIFFUXX plugin suffers from a SQL injection vulnerability that stems from insufficient cleanup of the tariffuxxconfigurator shortcode for user-supplied input, which...

6.5CVSS8.2AI score0.00287EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/11 9:28 a.m.14 views

CVE-2025-7652 Easy Plugin Stats <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Easy Plugin Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eps' shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.0018EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/11 6:25 a.m.19 views

CVE-2025-10124

The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...

6.5CVSS6.8AI score0.00246EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/09 12:49 a.m.9 views

WordPress Salient Shortcodes plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Salient Shortcodes versions = 1.5.4...

6.5CVSS6.1AI score0.00138EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-11792

Malware in sbrugna...

5.4CVSS5.5AI score0.00604EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-9261

Malware in sbrugna...

6.5CVSS6.5AI score0.00867EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-6695

Malware in sbrugna...

6.1CVSS6.3AI score0.0134EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-11757

Malware in sbrugna...

6.5CVSS6.5AI score0.00995EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-11771

Malware in sbrugna...

4.3CVSS4.8AI score0.00783EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-11428

Malware in sbrugna...

5CVSS5.2AI score0.02571EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-11382

Malware in sbrugna...

5.4CVSS5.6AI score0.00547EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-9158

Malware in sbrugna...

7.5CVSS7.6AI score0.01389EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-9696

Malware in sbrugna...

9.8CVSS9.5AI score0.12092EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-59165

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00472EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-3498

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00363EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-27811

Malicious code in bioql PyPI...

4.3CVSS9.2AI score0.00527EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-50333

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00331EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2023-29019

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00414EPSS
SaveExploits0References1
Rows per page
Query Builder