Lucene search
+L

62 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•4 views

CVE-2025-49316: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.5.0...

7.1CVSS5.8AI score0.00342EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•17 views

PT-2025-25706 · Wp2Leads · Wp2Leads

Name of the Vulnerable Software and Affected Versions: WP2LEADS versions 3.5.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

7.1CVSS6AI score0.00342EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/23 7:40 a.m.•19 views

CVE-2024-31375

Missing Authorization vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads.This issue affects WP2LEADS: from n/a through = 3.2.7...

5.4CVSS5.9AI score0.00391EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/17 6:54 p.m.•26 views

CVE-2025-32922

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This issue affects WP2LEADS: from n/a through = 3.5.0...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/15 7:15 p.m.•22 views

CVE-2025-32922

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This issue affects WP2LEADS: from n/a through = 3.5.0...

7.1CVSS0.00143EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/15 6:11 p.m.•20 views

CVE-2025-32922 WordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This issue affects WP2LEADS: from n/a through = 3.5.0...

7.1CVSS8.6AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/15 6:11 p.m.•31 views

CVE-2025-32922 WordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This issue affects WP2LEADS: from n/a through = 3.5.0...

7.1CVSS0.00143EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/15 6:11 p.m.•70 views

CVE-2025-32922

The CVE-2025-32922 entry describes a CSRF vulnerability in the WordPress WP2LEADS plugin that can lead to stored XSS. Affected software: WP2LEADS (WordPress und KlickTipp einfach verbinden) versions up to and including 3.5.0. The issue is triggered via CSRF and can result in stored cross-site scr...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•19 views

PT-2025-21349 · WordPress · Wp2Leads

Name of the Vulnerable Software and Affected Versions: WP2LEADS versions 3.5.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, potentially...

7.1CVSS7.5AI score0.00143EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•4 views

CVE-2025-32922: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This issue affects WP2LEADS: from n/a through = 3.5.0...

7.1CVSS5.8AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•18 views

WordPress plugin WP2LEADS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS7.1AI score0.00143EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/03 9:53 a.m.•19 views

CVE-2025-30827

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.4.5...

7.1CVSS7.2AI score0.00311EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 6:15 a.m.•30 views

CVE-2025-30827

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.4.5...

7.1CVSS0.00311EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 5:31 a.m.•60 views

CVE-2025-30827

WP2LEADS (WordPress plugin)

7.1CVSS7.2AI score0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 5:31 a.m.•10 views

CVE-2025-30827 WordPress WP2LEADS plugin <= 3.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.4.5...

7.1CVSS7.3AI score0.00311EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•3 views

CVE-2025-30827: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.4.5...

7.1CVSS5.8AI score0.00311EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•16 views

WordPress plugin WP2LEADS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

7.1CVSS7.9AI score0.00311EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/16 1:20 p.m.•10 views

CVE-2025-24565

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.3.3...

7.1CVSS5.9AI score0.0025EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/14 1:15 p.m.•17 views

CVE-2025-24565

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.3.3...

7.1CVSS0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/14 12:44 p.m.•29 views

CVE-2025-24565 WordPress WP2LEADS plugin <= 3.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.3.3...

7.1CVSS0.0025EPSS
SaveExploits0References1
Rows per page
Query Builder