Lucene search
K

5 matches found

Patchstack
Patchstack
added 2026/05/01 9:15 a.m.1 views

WordPress Unlimited Elements For Elementor plugin <= 1.5.140 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.140...

6.1CVSS5.8AI score0.00135EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/04/14 3:0 a.m.0 views

EUVD-2026-22209

PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code execution through untrusted YAML files. When praisonai workflow run loads a YAML file with type: job, the...

9.8CVSS6.4AI score0.00141EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.2 views

PraisonAI 访问控制错误漏洞

PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.139 and praisonaiagents prior to 1.5.140 contained an access control vulnerability. This vulnerability stemmed from the lack of authentication on the browser bridge and...

9.1CVSS5.8AI score0.00073EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.1 views

WordPress plugin Unlimited Elements For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS8AI score0.00132EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/02/19 10:51 p.m.2 views

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Transparent Split Hero Widget vulnerability discovered by zer0gh0st in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.140...

6.4CVSS5.8AI score0.00132EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder