Lucene search
K

9 matches found

CNNVD
CNNVD
added 2026/01/16 12:0 a.m.2 views

WordPress plugin: Related posts by taxonomy – Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00016EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/15 11:21 p.m.4 views

WordPress Related Posts by Taxonomy plugin <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'related_posts_by_tax' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'relatedpostsbytax' Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Related Posts by Taxonomy versions = 2.7.6...

6.4CVSS5.8AI score0.00016EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/11/24 4:31 p.m.2 views

EUVD-2025-198931

Malicious code in @posthog/taxonomy-plugin npm...

6.6AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 4:31 p.m.3 views

Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

6.9AI score
Exploits0References3
OSV
OSV
added 2025/11/24 4:31 p.m.2 views

MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

6.8AI score
Exploits0References3
Snyk
Snyk
added 2025/11/24 4:24 p.m.3 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 5:27 a.m.1 views

CVE-2023-25028

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in chuyencode CC Custom Taxonomy plugin = 1.0.1 versions...

5.9CVSS5.2AI score0.00207EPSS
Exploits0References1
OSV
OSV
added 2023/05/24 5:15 p.m.0 views

CVE-2023-25028

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in chuyencode CC Custom Taxonomy plugin = 1.0.1 versions...

4.8CVSS6.5AI score0.00207EPSS
Exploits0References1
CVE
CVE
added 2023/05/24 4:42 p.m.44 views

CVE-2023-25028

CVE-2023-25028 affects the WordPress plugin CC Custom Taxonomy (versions

5.9CVSS5AI score0.00207EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder