Lucene search
+L

2037 matches found

Vulnrichment
Vulnrichment
added 2025/01/09 3:39 p.m.11 views

CVE-2025-22806 WordPress Black Widgets For Elementor plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.8...

6.5CVSS7AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/09 9:15 a.m.9 views

CVE-2024-13153

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

6.4CVSS0.00308EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.5 views

WordPress plugin Black Widgets For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.7AI score0.00234EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/07 10:10 p.m.5 views

WordPress Black Widgets For Elementor plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Black Widgets For Elementor versions = 1.3.8...

6.5CVSS6.1AI score0.00234EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/01/07 11:15 a.m.6 views

CVE-2024-56274

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through 1.2.15...

5.4CVSS7.3AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.10 views

CVE-2024-56274

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.15...

6.5CVSS0.00295EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 10:49 a.m.19 views

CVE-2024-56274 WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets astra-widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through = 1.2.15...

6.5CVSS0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:49 a.m.8 views

CVE-2024-56274 WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/a through 1.2.15...

6.5CVSS6.5AI score0.00295EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 10:49 a.m.57 views

CVE-2024-56274

CVE-2024-56274 is a Stored XSS in Astra Widgets (WordPress) affecting Astra Widgets

6.5CVSS7.2AI score0.00295EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.9 views

WordPress plugin Astra Widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS7.7AI score0.00295EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/03 11:20 a.m.10 views

WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara in WordPress Plugin Astra Widgets versions = 1.2.15...

6.5CVSS6.1AI score0.00295EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/25 4:15 a.m.14 views

CVE-2024-12272

The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with...

8.8CVSS0.00752EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/25 3:21 a.m.6 views

CVE-2024-12272 WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion

The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with...

8.8CVSS8.9AI score0.00752EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/25 3:21 a.m.53 views

CVE-2024-12272

CVE-2024-12272 affects the WordPress plugin WP Travel Engine – Elementor Widgets (≤1.3.7). The issue is a Local File Inclusion (LFI) condition in multiple widgets that authenticated users with Contributor+ access can exploit to include and execute arbitrary PHP files on the server, effectively en...

8.8CVSS8.9AI score0.00752EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/25 12:0 a.m.4 views

PT-2024-17524 · WordPress · Wp Travel Engine – Elementor Widgets

Name of the Vulnerable Software and Affected Versions: WP Travel Engine – Elementor Widgets versions up to, and including, 1.3.7 Description: The WP Travel Engine – Elementor Widgets plugin for WordPress is vulnerable to Local File Inclusion. This makes it possible for authenticated attackers, wi...

8.8CVSS9.6AI score0.00752EPSS
SaveExploits0References9
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/22 1:26 p.m.4 views

Malicious code in widgets-mainappointments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05c4f3cc4d5297de929275823c2b67fd6bb6f8988f85acc300b9e4b342219b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/12/22 1:26 p.m.5 views

MAL-2024-12098 Malicious code in widgets-mainappointments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05c4f3cc4d5297de929275823c2b67fd6bb6f8988f85acc300b9e4b342219b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.6 views

PT-2024-17552 · WordPress · Animation Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Animation Addons for Elementor plugin for WordPress versions up to, and including, 1.1.6 Description: The issue concerns the exposure of sensitive information in the Animation Addons for Elementor plugin for WordPress. This is possible throug...

4.3CVSS9.4AI score0.00335EPSS
SaveExploits0References7
Fedora
Fedora
added 2024/12/17 4:4 a.m.33 views

[SECURITY] Fedora 40 Update: python-notebook-7.3.1-1.fc40

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

6.1CVSS6.5AI score0.00822EPSS
SaveExploits1
Fedora
Fedora
added 2024/12/17 4:1 a.m.17 views

[SECURITY] Fedora 41 Update: python-notebook-7.3.1-1.fc41

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

6.1CVSS6.8AI score0.00822EPSS
SaveExploits1
Rows per page
Query Builder