Lucene search
+L

266370 matches found

Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•19 views

PT-2026-1731

Name of the Vulnerable Software and Affected Versions Booking Calendar versions prior to 10.14.11 Description The Booking Calendar plugin for WordPress is susceptible to sensitive information exposure via the WPBC FLEXTIMELINE NAV AJAX action. This occurs because nonce verification is conditional...

5.3CVSS6.2AI score0.00379EPSS
SaveExploits0References10
Circl
Circl
•added 2026/01/05 2:28 p.m.•10 views

CVE-2023-49186

creationtimestamp| type| source ---|---|--- 2026-01-05 14:28:00+00:00| seen| https://gist.github.com/Darkcrai86/c6d2bcedcc4d020885161cc357dd31ef 2026-01-05 16:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mboub2rg7s2u...

7.1CVSS5.8AI score0.00167EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/01 4:26 p.m.•23 views

CVE-2025-62150

Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through = 1.0.6...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References1
Circl
Circl
•added 2025/12/31 4:38 p.m.•14 views

CVE-2025-62080

creationtimestamp| type| source ---|---|--- 2025-12-31 16:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcch6vcrn2e...

4.3CVSS5.7AI score0.00119EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/31 4:15 p.m.•17 views

CVE-2025-62150

Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through = 1.0.6...

4.3CVSS0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 3:42 p.m.•42 views

CVE-2025-62150 WordPress History Timeline plugin <= 1.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through = 1.0.6...

4.3CVSS0.00181EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:42 p.m.•16 views

EUVD-2025-206009

Missing Authorization vulnerability in Themesawesome History Timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through 1.0.6...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 3:42 p.m.•8 views

CVE-2025-62150 WordPress History Timeline plugin <= 1.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themesawesome History Timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through 1.0.6...

4.3CVSS6.6AI score0.00181EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 3:42 p.m.•30 views

CVE-2025-62150

Technical details for CVE-2025-62150 are not provided in the supplied documents. Public information about affected plugin/version, exploitation, impact, or fixes is not present here; monitor for updates.

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 3:30 p.m.•16 views

WordPress History Timeline plugin <= 1.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin History Timeline versions = 1.0.6...

4.3CVSS6.7AI score0.00181EPSS
SaveExploits0Affected Software1
Circl
Circl
•added 2025/12/31 8:12 a.m.•19 views

CVE-2025-2026

creationtimestamp| type| source ---|---|--- 2025-12-31 08:12:09+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mbbg665bto2u 2025-12-31 09:26:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbbkdm6wf72q 2025-12-31 13:55:08+00:00| seen|...

7.1CVSS5.5AI score0.00411EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/12/31 12:00 a.m.•15 views

WordPress Bold Timeline Lite plugin <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'title' Parameter in 'boldtimelinegroup' Shortcode vulnerability discovered by zaim in WordPress Plugin Bold Timeline Lite versions = 1.2.7...

6.4CVSS5.9AI score0.0028EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•21 views

PT-2025-54369

Name of the Vulnerable Software and Affected Versions Themesawesome History Timeline versions through 1.0.6 Description A missing authorization flaw exists in Themesawesome History Timeline, stemming from incorrectly configured access control security levels. This allows for potential exploitatio...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•2 views

CVE-2025-62150: Missing Authorization

Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through = 1.0.6...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•21 views

WordPress plugin History Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/30 12:00 a.m.•23 views

WordPress Bold Timeline Lite plugin cross-site scripting vulnerability

WordPress Bold Timeline Lite plugin is a free plugin designed for creating dynamic timeline content on WordPress websites. The WordPress Bold Timeline Lite plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

5.4CVSS6.1AI score0.00164EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/27 12:02 a.m.•17 views

WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Bold Timeline Lite versions = 1.2.7...

5.4CVSS5.8AI score0.00164EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•14 views

CVE-2025-68513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

6.5CVSS6AI score0.00164EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•15 views

EUVD-2025-205203

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

5.4CVSS5.5AI score0.00164EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•18 views

CVE-2025-68513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

6.5CVSS0.00164EPSS
SaveExploits0References1
Rows per page
Query Builder