Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

35 matches found

Patchstack
Patchstack•added 2026/05/26 5:20 p.m.•6 views

WordPress My Email Shortcode plugin <= 0.91 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')] vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability discovered by zakaria in WordPress Plugin My Email Shortcode versions = 0.91...

6.4CVSS5.8AI score0.00187EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/05/11 7:3 p.m.•4 views

WordPress Advanced Social Media Icons plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Advanced Social Media Icons versions = 1.2...

6.4CVSS5.8AI score0.00242EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/05/04 2:6 p.m.•3 views

WordPress WP-Clippy plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin WP-Clippy versions = 1.0.0...

6.4CVSS5.8AI score0.00188EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/04/14 3:37 a.m.•2 views

WordPress Surbma | Booking.com plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Surbma | Booking.com Shortcode versions = 2.1...

6.4CVSS5.8AI score0.00152EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/04/09 6:31 p.m.•3 views

WordPress pdfl.io plugin <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'text' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin pdfl.io versions = 1.0.5...

6.4CVSS5.9AI score0.00296EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/03/23 7:23 p.m.•5 views

WordPress Schema Shortcode plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Schema Shortcode versions = 1.0...

6.4CVSS5.8AI score0.00156EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/03/23 4:31 p.m.•6 views

WordPress Show Posts list plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Show Posts list versions = 1.1.0...

6.4CVSS5.8AI score0.00235EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/03/23 3:35 p.m.•5 views

WordPress Ecover Builder For Dummies plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Ecover Builder For Dummies versions = 1.0...

6.4CVSS5.8AI score0.00201EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/26 11:54 p.m.•8 views

WordPress Electric Enquiries plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'button' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Electric Enquiries versions = 1.1...

6.4CVSS5.3AI score0.0024EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 9:15 a.m.•4 views

WordPress ONLYOFFICE DocSpace plugin <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin ONLYOFFICE DocSpace versions = 2.1.1...

6.4CVSS5.3AI score0.00299EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 7:59 a.m.•6 views

WordPress Catch Popup plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Catch Popup versions = 1.4.4...

6.4CVSS5.3AI score0.00431EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/31 12:0 a.m.•6 views

WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Autoship Cloud for WooCommerce Subscription Products versions = 2.8.0...

6.4CVSS5.3AI score0.00222EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/31 12:0 a.m.•4 views

WordPress Image Magnify plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Image Magnify versions = 1.1...

6.4CVSS5.3AI score0.00408EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/31 12:0 a.m.•4 views

WordPress Ketchup Shortcodes plugin <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Ketchup Shortcodes versions = 0.1.2...

6.4CVSS5.4AI score0.00236EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/11/21 10:48 p.m.•5 views

WordPress Stock Tools plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Stock Tools versions = 1.1...

6.4CVSS5.7AI score0.00197EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/11/21 10:47 p.m.•3 views

WordPress Padlet Shortcode plugin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Padlet Shortcode versions = 1.3...

6.4CVSS5.8AI score0.00194EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/11/21 10:37 p.m.•3 views

WordPress Tips Shortcode plugin <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Tips Shortcode versions = 0.2.1...

6.4CVSS5.7AI score0.00162EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/11/21 10:22 p.m.•4 views

WordPress Islamic Phrases plugin <= 2.12.2015 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Islamic Phrases versions = 2.12.2015...

6.4CVSS5.7AI score0.00162EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/11/11 12:35 a.m.•3 views

WordPress Skip to Timestamp plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Skip to Timestamp versions = 1.4.4...

6.4CVSS5.8AI score0.00237EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/11/10 11:49 p.m.•4 views

WordPress WP Count Down Timer plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin WP Count Down Timer versions = 1.0.1...

6.4CVSS5.7AI score0.00189EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder