Lucene search
K

14 matches found

Patchstack
Patchstack
added 2025/09/22 7:8 p.m.4 views

WordPress WooMS Plugin <= 9.12 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WooMS versions = 9.12...

5.9CVSS6AI score0.00075EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/09/22 7:8 p.m.3 views

WordPress WooMS Plugin <= 9.12 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin WooMS versions = 9.12...

5.3CVSS6.7AI score0.00065EPSS
Exploits0Affected Software1
CVE
CVE
added 2025/09/22 6:24 p.m.6 views

CVE-2025-57956

Technical details about CVE-2025-57956 are not provided in the connected documents. The available sources mention WooMS, and a separate CVE for WooMS, but do not disclose affected versions, exploit vectors, impact specifics, or fixes for this CVE. Monitor for updates.

5.9CVSS5.9AI score0.00075EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:24 p.m.8 views

CVE-2025-57956 WordPress WooMS Plugin <= 9.12 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcraft WooMS wooms allows Stored XSS.This issue affects WooMS: from n/a through = 9.12...

5.9CVSS0.00075EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:24 p.m.2 views

CVE-2025-57956 WordPress WooMS Plugin <= 9.12 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcraft WooMS allows Stored XSS. This issue affects WooMS: from n/a through 9.12...

5.9CVSS5.6AI score0.00075EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:24 p.m.6 views

CVE-2025-57957

CVE-2025-57957 (WooMS) : Missing Authorization in WooMS (WooCommerce integration by wooms) affecting version range up to 9.12. CVSS 3.1 shows Network attack, no user interaction, no confidentiality but partial integrity impact; base score 5.3 (Medium). Wordfence/WooMS entry confirms the vulnerabi...

5.3CVSS5.9AI score0.00065EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:24 p.m.1 views

CVE-2025-57957 WordPress WooMS Plugin <= 9.12 - Broken Access Control Vulnerability

Missing Authorization vulnerability in wpcraft WooMS wooms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooMS: from n/a through = 9.12...

5.3CVSS5.1AI score0.00065EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:24 p.m.7 views

CVE-2025-57957 WordPress WooMS Plugin <= 9.12 - Broken Access Control Vulnerability

Missing Authorization vulnerability in wpcraft WooMS wooms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooMS: from n/a through = 9.12...

5.3CVSS0.00065EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.1 views

WordPress plugin WooMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

5.9CVSS5.8AI score0.00075EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:47 p.m.4 views

CVE-2025-32602 WordPress WooMS Plugin <= 9.12 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aiiddqd WooMS allows Reflected XSS. This issue affects WooMS: from n/a through 9.12...

7.1CVSS6.9AI score0.00669EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:47 p.m.39 views

CVE-2025-32602

CVE-2025-32602 — WooMS Reflected XSS Affected software: WordPress plugin WooMS (versions up to 9.12). Vulnerability: Reflected Cross-Site Scripting due to improper neutralization of input during web page generation. Impact: The vulnerability enables injection of script via input that is reflected...

7.1CVSS7.2AI score0.00669EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:47 p.m.8 views

CVE-2025-32602 WordPress WooMS Plugin <= 9.12 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcraft WooMS wooms allows Reflected XSS.This issue affects WooMS: from n/a through = 9.12...

7.1CVSS0.00669EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.1 views

WordPress plugin WooMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00669EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/15 6:54 a.m.1 views

WordPress WooMS Plugin <= 9.12 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WooMS versions = 9.12...

7.1CVSS6.9AI score0.00669EPSS
Exploits0Affected Software1
Rows per page
Query Builder