24712 matches found
CVE-2016-15048
creationtimestamp| type| source ---|---|--- 2025-10-22 15:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3s5zmljlb22 2025-10-23 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb24v3qy2p 2026-06-19 12:45:23+00:00| exploited|...
CVE-2025-49957
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...
CVE-2023-53728
creationtimestamp| type| source ---|---|--- 2025-10-22 15:03:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3s4jghzyg2e...
CVE-2025-49957
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...
CVE-2025-49957
CVE-2025-49957 concerns the WordPress plugin Email Attachment by Order Status & Products (versions n/a through 1.0.1). Connected sources describe a Cross-Site Scripting (XSS) vulnerability caused by improper input handling during web page generation, resulting in a Reflected XSS that could affect...
CVE-2025-49957 WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...
CVE-2025-49957 WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...
CVE-2025-62771
creationtimestamp| type| source ---|---|--- 2025-10-22 14:00:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418179313652784...
CVE-2025-62772
creationtimestamp| type| source ---|---|--- 2025-10-22 14:00:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418179313652784...
CVE-2025-40778
creationtimestamp| type| source ---|---|--- 2025-10-22 13:56:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/68 2025-10-22 15:58:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418643498336537 2025-10-22 16:10:12+00:00| seen|...
CVE-2025-11411
creationtimestamp| type| source ---|---|--- 2025-10-22 10:41:55+00:00| seen| https://social.nlnetlabs.nl/users/nlnetlabs/statuses/115417395423431007 2025-10-22 15:53:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418621881685262 2025-10-22 18:48:07+00:00| seen|...
CVE-2025-12033
creationtimestamp| type| source ---|---|--- 2025-10-22 07:43:31+00:00| seen| Telegram/ukV8RabafTGa2PME5ickPQ1ceLmQA3C2PIKtTctNgjPk...
PT-2025-43218
Name of the Vulnerable Software and Affected Versions Email Attachment by Order Status & Products versions n/a through 1.0.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This issue...
WordPress plugin email-attachment-by-order-status-products 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-53042
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
CVE-2025-53054
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
CVE-2025-52079
creationtimestamp| type| source ---|---|--- 2025-10-21 19:42:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115413862186897967...
CVE-2025-11625
creationtimestamp| type| source ---|---|--- 2025-10-21 13:48:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115412468776783222 2025-10-21 16:10:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ppsvxgm622...
CVE-2025-5496
creationtimestamp| type| source ---|---|--- 2025-10-21 10:47:26+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115411756361784994 2025-10-21 13:13:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3pfwaieoq2u...