Lucene search
K

14 matches found

NVD
NVD
added 2026/04/21 7:16 a.m.0 views

CVE-2026-6712

The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission...

4.4CVSS0.00031EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/21 6:43 a.m.27 views

CVE-2026-6711 Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting

The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6. This is due to the use of filterinput without a sanitization filter and insufficient output escaping. This makes it possible for...

6.1CVSS0.00087EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/21 6:43 a.m.0 views

CVE-2026-6711

The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6. This is due to the use of filterinput without a sanitization filter and insufficient output escaping. This makes it possible for...

6.1CVSS5.9AI score0.00087EPSS
Exploits0References3
CVE
CVE
added 2026/04/21 6:43 a.m.7 views

CVE-2026-6712

CVE-2026-6712 describes a Stored Cross-Site Scripting vulnerability in the Website LLMs.txt WordPress plugin. The flaw affects versions up to 8.2.6 and arises from insufficient input sanitization and output escaping in admin settings, enabling authenticated attackers with administrator-level (or ...

4.4CVSS5.8AI score0.00031EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/21 12:0 a.m.4 views

WordPress plugin Website LLMs.txt 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.8AI score0.00087EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/04/20 6:26 p.m.2 views

WordPress Website LLMs.txt plugin <= 8.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Kazuma Matsumoto - GMO Cybersecurity by IERAE, Inc. in WordPress Plugin Website LLMs.txt versions = 8.2.6...

4.4CVSS5.8AI score0.00031EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:1 p.m.2 views

CVE-2026-27068

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Howard Website LLMs.txt website-llms-txt allows Reflected XSS.This issue affects Website LLMs.txt: from n/a through = 8.2.6...

7.1CVSS5.9AI score0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/19 9:30 a.m.0 views

EUVD-2026-13089

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Howard Website LLMs.Txt allows Reflected XSS.This issue affects Website LLMs.Txt: from n/a through 8.2.6...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References2
CVE
CVE
added 2026/03/19 8:42 a.m.3 views

CVE-2026-27068

CVE-2026-27068 describes a Reflected XSS in the WordPress plugin Website LLMs.txt (versions n/a through &lt;= 8.2.6). The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting when user-supplied data is reflected. Several connected sources (N...

7.1CVSS5.9AI score0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/19 8:42 a.m.1 views

CVE-2026-27068

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Howard Website LLMs.Txt allows Reflected XSS.This issue affects Website LLMs.Txt: from n/a through 8.2.6...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/19 8:42 a.m.0 views

CVE-2026-27068 WordPress Website LLMs.txt plugin <= 8.2.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Howard Website LLMs.txt website-llms-txt allows Reflected XSS.This issue affects Website LLMs.txt: from n/a through = 8.2.6...

7.1CVSS5.9AI score0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/19 12:0 a.m.2 views

WordPress plugin Website LLMs.Txt 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/19 12:0 a.m.1 views

PT-2026-26280

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Howard Website LLMs.Txt allows Reflected XSS.This issue affects Website LLMs.Txt: from n/a through 8.2.6...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/03/12 11:24 a.m.4 views

WordPress Website LLMs.txt plugin <= 8.2.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by benzdeus in WordPress Plugin Website LLMs.txt versions = 8.2.6...

5.8AI score0.00045EPSS
Exploits0Affected Software1
Rows per page
Query Builder