Lucene search
K

262 matches found

Vulnrichment
Vulnrichment
added 2025/12/12 3:20 a.m.1 views

CVE-2025-13961 Data Visualizer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Data Visualizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'visualize' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00031EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.1 views

WordPress plugin Data Visualizer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.7AI score0.00031EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.2 views

PT-2025-50833

The Data Visualizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'visualize' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5AI score0.00031EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/12/11 8:46 p.m.4 views

WordPress Data Visualizer plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Gilang - DJ in WordPress Plugin Data Visualizer versions = 1.1...

6.4CVSS5.6AI score0.00031EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/03 7:4 a.m.3 views

CVE-2025-12483

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

6.5CVSS6.5AI score0.00031EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/02 9:30 a.m.4 views

EUVD-2025-200201

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

6.5CVSS6.1AI score0.00031EPSS
Exploits0References5
NVD
NVD
added 2025/12/02 7:15 a.m.3 views

CVE-2025-12483

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

6.5CVSS0.00031EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/02 6:40 a.m.4 views

CVE-2025-12483 Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

6.5CVSS6.1AI score0.00031EPSS
Exploits0References4
CVE
CVE
added 2025/12/02 6:40 a.m.8 views

CVE-2025-12483

The vulnerability CVE-2025-12483 affects the Visualizer: Tables and Charts Manager for WordPress plugin. It is an authenticated SQL Injection via the query parameter in all versions up to 3.11.12, due to insufficient escaping and query preparation, enabling attackers with Contributor-level access...

6.5CVSS6.1AI score0.00031EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/02 6:40 a.m.4 views

CVE-2025-12483 Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

6.5CVSS0.00031EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.4 views

PT-2025-48646

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

6.5CVSS6.5AI score0.00031EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

WordPress plugin Visualizer: Tables and Charts Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

6.5CVSS7.4AI score0.00031EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/12/01 11:24 p.m.7 views

WordPress Visualizer: Tables and Charts Manager for WordPress plugin <= 3.11.12 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Visualizer versions = 3.11.12...

6.5CVSS7.8AI score0.00031EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/11/11 6:30 p.m.1 views

EUVD-2025-93486

Incorrect default permissions for some IntelR Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

6.7CVSS6AI score0.00012EPSS
Exploits0References2
NVD
NVD
added 2025/11/11 5:15 p.m.1 views

CVE-2025-31940

Incorrect default permissions for some IntelR Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

6.7CVSS0.00012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/11 4:50 p.m.1 views

CVE-2025-31940

Incorrect default permissions for some IntelR Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

6.7CVSS6.2AI score0.00012EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/11 4:50 p.m.3 views

CVE-2025-31940

Incorrect default permissions for some IntelR Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

6.7CVSS0.00012EPSS
Exploits0References1
CVE
CVE
added 2025/11/11 4:50 p.m.4 views

CVE-2025-31940

Intel Thread Director Visualizer software (pre-1.1.1) has incorrect default permissions in Ring 3 User Applications that may allow escalation of privilege. An unprivileged, authenticated user with high complexity conditions and local access, plus active user interaction, could impact confidential...

6.7CVSS6.1AI score0.00012EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.0 views

Intel Thread Director Visualizer 安全漏洞

Intel Thread Director Visualizer is a desktop application from Intel Corporation USA. It helps end-users visualize CPU utilization and the distribution between P-cores performance cores and E-cores energy-efficient cores for Alder Lake and above platforms. A security vulnerability exists in Intel...

6.7CVSS6.6AI score0.00012EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46423

Name of the Vulnerable Software and Affected Versions IntelR Thread Director Visualizer versions prior to 1.1.1 Description The software has incorrect default permissions within Ring 3 User Applications, potentially allowing an escalation of privilege. An unprivileged software adversary with an...

6.7CVSS6.2AI score0.00012EPSS
Exploits0References3
Rows per page
Query Builder