Lucene search
+L

1514 matches found

CNNVD
CNNVD
added 2025/03/24 12:0 a.m.7 views

WordPress plugin WordPress SQL Backup 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

7.1CVSS8.4AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/22 12:0 a.m.7 views

WordPress plugin Bitspecter Suite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.4CVSS8.2AI score0.00301EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/03/21 7:58 a.m.8 views

WordPressUTM tags + Landing page plugin <= 1.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin UTM tags tracking for Contact Form 7 versions = 2.1...

7.1CVSS8.1AI score0.00363EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/21 12:0 a.m.8 views

Jalios JPlatform 安全漏洞

Jalios JPlatform is a digital work platform from Jalios, Inc. A security vulnerability exists in Jalios JPlatform 10, which stems from improper input neutralization during web page generation and could lead to reflected cross-site scripting and stored cross-site scripting...

7.3CVSS5.8AI score0.00378EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/03/13 4:20 p.m.9 views

WordPress WP SVG Upload plugin <= 1.0.0 - Author+ Stored XSS via SVG vulnerability

Author+ Stored XSS via SVG vulnerability discovered by Pierre Rudloff in WordPress Plugin WP SVG Upload versions = 1.0.0...

4.8CVSS7.8AI score0.00247EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/03/13 6:15 a.m.7 views

CVE-2025-1436

The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

7.1CVSS7.3AI score0.00152EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2025/03/11 9:48 p.m.9 views

WordPress Insert Code plugin <= 2.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Insert Code versions = 2.4...

7.1CVSS8.2AI score0.00145EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.6 views

WordPress plugin FTP Sync 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.4AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.3 views

WordPress plugin Members page only for logged in users 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Members page only for logged in...

7.1CVSS8.1AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.5 views

WordPress plugin MaxA/B 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS8.6AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.5 views

WordPress plugin Hashtags 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS8.4AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.8 views

WordPress plugin Go To Top 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.2AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.7 views

WordPress plugin No Disposable Email 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.3AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.9 views

WordPress plugin Skitter Slideshow 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS8.1AI score0.00498EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/03/10 5:54 p.m.7 views

WordPress Appsero Helper plugin <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Appsero Helper versions = 1.3.2...

6.1CVSS5.9AI score0.00134EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/03/03 1:15 a.m.8 views

CVE-2025-25949

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update...

5.4CVSS5.9AI score0.00318EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.13 views

WordPress plugin NotFound WP SpaceContent 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS6.2AI score0.0015EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.7 views

WordPress plugin ThemeMakers PayPal Express Checkout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.4CVSS7.3AI score0.00281EPSS
SaveExploits0References4
CVE
CVE
added 2025/02/26 6:0 a.m.61 views

CVE-2024-10563

The WooCommerce Cart Count Shortcode plugin for WordPress (versions

5.4CVSS6AI score0.00346EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/02/24 7:52 p.m.12 views

CVE-2025-26529 Stored XSS risk in admin live log

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

8.3CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder