Lucene search
+L

1244 matches found

Cvelist
Cvelist
added 2025/04/04 3:59 p.m.30 views

CVE-2025-32192 WordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UltraPress Ultra Addons Lite for Elementor ut-elementor-addons-lite allows Stored XSS.This issue affects Ultra Addons Lite for Elementor: from n/a through = 1.1.8...

6.5CVSS0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/04 3:59 p.m.64 views

CVE-2025-32192

CVE-2025-32192 is a Stored XSS in Ultra Addons Lite for Elementor (Improper input neutralization during web page generation). Affected: Ultra Addons Lite for Elementor up to version 1.1.8 (root cause: insufficient sanitization of user-controlled input in web page rendering). In the connected Word...

6.5CVSS7.2AI score0.00392EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/04 12:00 a.m.10 views

PT-2025-14974 · Unknown · Ultra Addons Lite For Elementor

Name of the Vulnerable Software and Affected Versions: Ultra Addons Lite for Elementor versions 1.1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

6.5CVSS6.8AI score0.00392EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.8 views

WordPress plugin Ultra Addons Lite for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.5AI score0.00392EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/02 8:28 a.m.21 views

CVE-2024-13832

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS6.7AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/28 9:15 a.m.12 views

CVE-2024-13832

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00321EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/28 8:23 a.m.8 views

CVE-2024-13832 Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS4.5AI score0.00321EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/28 8:23 a.m.34 views

CVE-2024-13832 Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/28 12:00 a.m.11 views

WordPress plugin Ultra Addons Lite for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8AI score0.00321EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/02/27 11:37 p.m.10 views

WordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure vulnerability

Authenticated Contributor+ Restricted Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Ultra Addons Lite for Elementor versions = 1.1.8...

4.3CVSS7AI score0.00321EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/02/21 12:00 a.m.12 views

WordPress Booking Ultra Pro Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Booking Ultra Pro versions = 1.1.19...

7.1CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 8:46 a.m.10 views

CVE-2024-38717

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue affects Booking Ultra Pro: from n/a through 1.1.13...

7.1CVSS6.9AI score0.00447EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:56 a.m.10 views

CVE-2024-32960

Improper Privilege Management vulnerability in Booking Ultra Pro allows Privilege Escalation.This issue affects Booking Ultra Pro: from n/a through 1.1.12...

8.8CVSS6.9AI score0.00448EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:46 p.m.11 views

CVE-2024-44011

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through = 1.0.5...

7.5CVSS5.9AI score0.00557EPSS
SaveExploits0References1
Redos
Redos
added 2025/01/28 12:00 a.m.18 views

ROS-20250128-01

A firmware vulnerability in Intel Core Ultra processors is related to improper isolation of shared resources between trusted and untrusted agents. shared resources between trusted and untrusted agents. Exploitation of the vulnerability could allow an attacker to escalate privileges...

7.8CVSS7AI score0.00237EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.10 views

PT-2025-21118

Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue is related to the incorrect initialization of resources in the branch prediction unit for some IntelR Core Ultra Processors. This may allow an authenticated...

6.8CVSS7.3AI score0.00268EPSS
SaveExploits0References102
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.4 views

PT-2025-21068

Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue concerns incorrect behavior order in some IntelR Core Ultra Processors, potentially allowing an unauthenticated user to enable information disclosure via...

8.8CVSS7.5AI score0.00413EPSS
SaveExploits0References140
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.25 views

The vulnerability of Intel Core Ultra processor microprogramming software, related to processor locking, allows a hacker to trigger a service failure.

The vulnerability of Intel Core Ultra microprogramming software is related to the locking of the processor due to discrepancies between the instruction set architecture ISA and the processor’s logic. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.1AI score0.00279EPSS
SaveExploits0References9Affected Software5
ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.24 views

CVE-2023-32601

Missing Authorization vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Ultra Pro: from n/a through = 1.1.12...

5.4CVSS5.8AI score0.00457EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/13 3:15 p.m.12 views

CVE-2023-32601

Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Ultra Pro: from n/a through 1.1.12...

5.4CVSS0.00457EPSS
SaveExploits0References1
Rows per page
Query Builder