Lucene search
+L

259 matches found

CVE
CVE
added 2026/02/19 8:27 a.m.16 views

CVE-2026-25420

The CVE-cited issue affects the WordPress MailerLite plugin, versions up to and including 1.7.18. The root cause is Missing/Incorrect Authorization due to broken access control in the official-mailerlite-sign-up-forms flow. Public mappings across Red Hat, NVD, CVE listing, and vulnerability datab...

4.3CVSS5.4AI score0.0024EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:4 a.m.12 views

CVE-2024-39654

Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through = 2.2.12...

5.3CVSS5.9AI score0.00359EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.12 views

CVE-2025-1714

Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server...

6.9CVSS7AI score0.00352EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/31 11:5 a.m.7 views

CVE-2025-69008

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Inboxify Inboxify Sign Up Form inboxify-sign-up-form allows Stored XSS.This issue affects Inboxify Sign Up Form: from n/a through = 1.0.4...

5.9CVSS6AI score0.00179EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/30 12:30 p.m.10 views

EUVD-2025-205735

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Inboxify Inboxify Sign Up Form inboxify-sign-up-form allows Stored XSS.This issue affects Inboxify Sign Up Form: from n/a through = 1.0.4...

5.9CVSS5.5AI score0.00179EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/30 10:47 a.m.24 views

CVE-2025-69008

CVE-2025-69008 is described in the Initial document as an Improper Neutralization of Input During Web Page Generation (Stored XSS) in Inboxify Sign Up Form (inboxify-sign-up-form), affecting Inboxify Sign Up Form versions from n/a through 1.0.4. The CVE entry notes Stored XSS risk due to insuffic...

5.9CVSS5.6AI score0.00179EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/30 10:47 a.m.5 views

CVE-2025-69008 WordPress Inboxify Sign Up Form plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Inboxify Inboxify Sign Up Form inboxify-sign-up-form allows Stored XSS.This issue affects Inboxify Sign Up Form: from n/a through = 1.0.4...

5.9CVSS5.6AI score0.00179EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/30 10:47 a.m.34 views

CVE-2025-69008 WordPress Inboxify Sign Up Form plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Inboxify Inboxify Sign Up Form inboxify-sign-up-form allows Stored XSS.This issue affects Inboxify Sign Up Form: from n/a through = 1.0.4...

5.9CVSS0.00179EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.7 views

WordPress plugin Inboxify Sign Up Form 安全漏洞

...

5.9CVSS5.8AI score0.00179EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.10 views

PT-2025-53890

Name of the Vulnerable Software and Affected Versions Inboxify versions prior to 1.0.5 Description The Inboxify Sign Up Form, specifically the inboxify-sign-up-form component, contains a flaw related to the handling of user-supplied data during web page creation. This can lead to the injection of...

5.9CVSS6.9AI score0.00179EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/26 7:6 a.m.9 views

WordPress Inboxify Sign Up Form plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin Inboxify Sign Up Form versions = 1.0.4...

5.9CVSS6.1AI score0.00179EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/07 3:54 p.m.10 views

CVE-2025-49393

Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.2...

9.8CVSS7AI score0.00526EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/06 4:15 p.m.9 views

CVE-2025-49393

Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.2...

9.8CVSS0.00526EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/06 3:53 p.m.14 views

CVE-2025-49393

CVE-2025-49393 (WordPress Sign-up Sheets plugin) exhibits Deserialization of Untrusted Data leading to PHP Object Injection in Sign-up Sheets

9.8CVSS6.6AI score0.00526EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/06 3:53 p.m.8 views

EUVD-2025-38012

Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.2...

6.5AI score0.00526EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/06 3:53 p.m.5 views

CVE-2025-49393 WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.2...

9.8CVSS6.5AI score0.00526EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.7 views

WordPress plugin Sign-up Sheets 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS6.8AI score0.00526EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.10 views

PT-2025-45209

Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.2...

7AI score0.00526EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/17 9:42 a.m.11 views

CVE-2025-58115

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

6.1CVSS6.2AI score0.00247EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/16 8:55 a.m.15 views

CVE-2025-58115

ChatLuck (Guest User Sign-up) is affected by a cross-site scripting vulnerability (CVE-2025-58115). The issue allows arbitrary script execution in a user’s browser when signing up as a guest, per Red Hat, NVD, CVE listings and JVN. The vulnerability affects ChatLuck’s guest signup flow; root caus...

6.1CVSS5.9AI score0.00247EPSS
SaveExploits0References2
Rows per page
Query Builder