Lucene search
+L

301 matches found

NVD
NVD
•added 2025/06/17 3:15 p.m.•13 views

CVE-2025-49854

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anh Tran Slim SEO slim-seo allows SQL Injection.This issue affects Slim SEO: from n/a through = 4.5.4...

7.6CVSS0.00318EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/17 3:01 p.m.•6 views

CVE-2025-49854 WordPress Slim SEO plugin <= 4.5.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anh Tran Slim SEO allows SQL Injection. This issue affects Slim SEO: from n/a through 4.5.4...

7.6CVSS7.9AI score0.00318EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/17 3:01 p.m.•23 views

CVE-2025-49854 WordPress Slim SEO plugin <= 4.5.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anh Tran Slim SEO slim-seo allows SQL Injection.This issue affects Slim SEO: from n/a through = 4.5.4...

7.6CVSS0.00318EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/17 3:01 p.m.•50 views

CVE-2025-49854

CVE-2025-49854 describes an SQL Injection in WordPress Slim SEO (versions n/a through 4.5.4) due to improper neutralization of input in SQL commands. Public sources (NVD, CVE List, Patchstack entry) confirm the vulnerability exists in Slim SEO and has a patch/update path: upgrading to a version l...

7.6CVSS5.9AI score0.00318EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•0 views

CVE-2025-49854: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anh Tran Slim SEO slim-seo allows SQL Injection.This issue affects Slim SEO: from n/a through = 4.5.4...

7.6CVSS5.8AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•10 views

WordPress plugin Slim SEO SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

7.6CVSS7.8AI score0.00318EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•14 views

PT-2025-25715 · Unknown · Anh Tran Slim Seo

Name of the Vulnerable Software and Affected Versions: Anh Tran Slim SEO versions n/a through 4.5.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations...

7.6CVSS7.7AI score0.00318EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/23 8:15 a.m.•12 views

CVE-2024-9440

Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption, the text variable from the user-provided Options object is assigned to an innerHTML without sanitation. Software that depends on this library to dynamically generate...

6.1CVSS6.2AI score0.00365EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:46 a.m.•14 views

CVE-2023-30536

slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An...

6.5CVSS6.8AI score0.00743EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:17 p.m.•16 views

CVE-2021-32033

Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be set independently from the used seed value for generating time-based one-time passwords, without authentication. Thus, a...

4.6CVSS6.6AI score0.00522EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:12 p.m.•16 views

CVE-2020-7805

An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...

10CVSS8AI score0.02574EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/21 12:16 p.m.•17 views

CVE-2025-4611

The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slimseobreadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS0.00512EPSS
SaveExploits1References7
OSV
OSV
•added 2025/05/21 9:21 a.m.•17 views

CVE-2025-4611 Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode

The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slimseobreadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6.1AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2025/05/21 9:21 a.m.•13 views

CVE-2025-4611 Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode

The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slimseobreadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS5.8AI score0.00512EPSS
SaveExploits1References7
CVE
CVE
•added 2025/05/21 9:21 a.m.•67 views

CVE-2025-4611

The CVE-2025-4611 entry concerns the WordPress plugin Slim SEO – Fast & Automated WordPress SEO Plugin. Affected component: the slim_seo_breadcrumbs shortcode in all versions up to and including 4.5.3. Root cause: insufficient input sanitization and output escaping on user-supplied attributes, en...

6.4CVSS5.7AI score0.00512EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/05/21 9:21 a.m.•37 views

CVE-2025-4611 Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode

The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slimseobreadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS0.00512EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/05/21 12:00 a.m.•13 views

WordPress plugin Slim SEO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6AI score0.00512EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/05/21 12:00 a.m.•17 views

PT-2025-22340 · WordPress · Slim Seo

Name of the Vulnerable Software and Affected Versions: The Slim SEO – Fast & Automated WordPress SEO Plugin versions up to, and including, 4.5.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's slim seo breadcrumbs shortcode due to insufficient input sanitization...

6.4CVSS5.8AI score0.00512EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/21 12:00 a.m.•4 views

CVE-2025-4611: Improper Neutralization of Input During Web Page Generation

The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slimseobreadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score0.00512EPSS
SaveExploits1References1
F5 Networks
F5 Networks
•added 2025/05/16 5:49 a.m.•21 views

K000151375: Intel Slim Bootloader vulnerability CVE-2025-20083

Security Advisory Description Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2025-20083 Impact There is no impact; F5 products are not affected by this vulnerability. Security...

7.5CVSS7AI score0.00156EPSS
SaveExploits0
Rows per page
Query Builder