Lucene search
+L

1007 matches found

Cvelist
Cvelist
added 2025/05/16 3:45 p.m.22 views

CVE-2025-48134 WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC WP Tabs wp-expand-tabs-free allows Object Injection.This issue affects WP Tabs: from n/a through = 2.2.12...

7.2CVSS0.00394EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.6 views

WordPress plugin WP Tabs 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

7.2CVSS7.6AI score0.00394EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/16 12:0 a.m.6 views

PT-2025-21731 · Shapedplugin Llc · Wp Tabs

Name of the Vulnerable Software and Affected Versions: ShapedPlugin LLC WP Tabs versions 2.2.11 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 2.2.11 and earlier, update to a version that contains a...

7.2CVSS7.3AI score0.00394EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/04/26 5:12 p.m.23 views

CVE-2025-46522

Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: from n/a through = 4.0.3...

7.1CVSS7.2AI score0.00127EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/24 5:13 p.m.5 views

WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Tabs versions = 4.0.3...

7.1CVSS7.3AI score0.00127EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/24 4:15 p.m.19 views

CVE-2025-46522

Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: from n/a through = 4.0.3...

7.1CVSS0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/24 4:8 p.m.33 views

CVE-2025-46522 WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: from n/a through = 4.0.3...

7.1CVSS0.00127EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/24 4:8 p.m.5 views

CVE-2025-46522 WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs allows Stored XSS. This issue affects Tabs: from n/a through 4.0.3...

7.1CVSS7AI score0.00127EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/24 4:8 p.m.65 views

CVE-2025-46522

CVE-2025-46522 : WordPress Tabs plugin (Billy Bryant Tabs) up to version 4.0.3 is affected by a Cross-Site Request Forgery (CSRF) that enables Stored XSS. The issue affects the Tabs component as listed (n/a through 4.0.3). Mitigation/fix: upgrade to a version later than 4.0.3 where the vulnerabil...

7.1CVSS7.2AI score0.00127EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.6 views

PT-2025-17826 · Unknown · Billy Bryant Tabs

Name of the Vulnerable Software and Affected Versions: Billy Bryant Tabs versions n/a through 4.0.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 4.0.3, update to a version later than 4.0.3 to resolve th...

7.1CVSS7.4AI score0.00127EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.4 views

WordPress plugin Tabs 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reque...

7.1CVSS7.3AI score0.00127EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/17 11:34 p.m.19 views

MGASA-2025-0137 Updated chromium-browser-stable packages fix security vulnerabilities

Use after free in Site Isolation. CVE-2025-3066 Inappropriate implementation in Custom Tabs. CVE-2025-3067 Inappropriate implementation in Intents. CVE-2025-3068 Inappropriate implementation in Extensions. CVE-2025-3069 Insufficient validation of untrusted input in Extensions. CVE-2025-3070...

8.8CVSS7.2AI score0.00552EPSS
SaveExploits0References4
Mageia
Mageia
added 2025/04/17 11:34 p.m.36 views

Updated chromium-browser-stable packages fix security vulnerabilities

Use after free in Site Isolation. CVE-2025-3066 Inappropriate implementation in Custom Tabs. CVE-2025-3067 Inappropriate implementation in Intents. CVE-2025-3068 Inappropriate implementation in Extensions. CVE-2025-3069 Insufficient validation of untrusted input in Extensions. CVE-2025-3070...

8.8CVSS7.5AI score0.00552EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/17 12:0 a.m.12 views

The vulnerability of the Custom Tabs component in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.

The vulnerability of the Custom Tabs component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...

6.4CVSS6.1AI score0.00249EPSS
SaveExploits0References15Affected Software7
NVD
NVD
added 2025/04/15 10:15 p.m.12 views

CVE-2025-26749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce product-tabs-for-woocommerce allows Stored XSS.This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through = 1.7.0...

6.5CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/15 9:53 p.m.55 views

CVE-2025-26749

CVE-2025-26749: Stored XSS in WPFactory Additional Custom Product Tabs for WooCommerce (Authenticated) affects the WordPress plugin Additional Custom Product Tabs for WooCommerce, versions up to 1.7.0. Root cause is improper neutralization of input during web page generation, enabling stored cros...

6.5CVSS7.2AI score0.00252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/13 4:43 p.m.27 views

CVE-2025-32075

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...

6.9CVSS7.1AI score0.00381EPSS
SaveExploits0References4
NVD
NVD
added 2025/04/11 5:15 p.m.32 views

CVE-2025-32075

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...

6.9CVSS0.00381EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/11 4:21 p.m.57 views

CVE-2025-32075

CVE-2025-32075 concerns the Wikimedia Foundation MediaWiki – Tabs Extension. Affected: versions 1.39–1.43. Issue: Improper input validation enabling Code Injection. Impact metrics indicate low to moderate confidentiality/integrity/availability effects with CVSS v4.0 base score 6.9 (NETWORK attack...

6.9CVSS6.8AI score0.00381EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/11 4:21 p.m.32 views

CVE-2025-32075 IP and user agent leaks in Extension:Tabs

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...

6.9CVSS0.00381EPSS
SaveExploits0References2
Rows per page
Query Builder