Lucene search
K

87 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-28408

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00386EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-50534

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00083EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-34872

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00404EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-18085

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00253EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-48353

Malicious code in bioql PyPI...

4.3CVSS8.7AI score0.00209EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-37182

Malicious code in bioql PyPI...

7.1CVSS7AI score0.04703EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-42546

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00193EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/13 4:31 a.m.3 views

CVE-2025-4666

The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

6.4CVSS5.8AI score0.00253EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/06/12 6:35 a.m.6 views

WordPress ZotPress plugin <= 7.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'nickname' vulnerability

Authenticated Author+ Stored Cross-Site Scripting via 'nickname' vulnerability discovered by mohamed hamadou ZoeniX in WordPress Plugin Zotpress versions = 7.3.15...

6.4CVSS5.5AI score0.00253EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/06/11 4:15 a.m.7 views

CVE-2025-4666

The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

6.4CVSS0.00253EPSS
Exploits0References6
CVE
CVE
added 2025/06/11 3:41 a.m.51 views

CVE-2025-4666

CVE-2025-4666 (Zotpress for WordPress) : Stored Cross-Site Scripting via the nickname parameter affects Zotpress versions up to 7.3.15. Reported as exploitable by authenticated attackers with Author-level access and above. Root cause: insufficient input sanitization/output escaping. Impact: scrip...

6.4CVSS5.7AI score0.00253EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/06/11 3:41 a.m.10 views

CVE-2025-4666 ZotPress <= 7.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'nickname'

The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

6.4CVSS0.00253EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/06/11 3:41 a.m.2 views

CVE-2025-4666 ZotPress <= 7.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'nickname'

The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

6.4CVSS5.9AI score0.00253EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/06/11 12:0 a.m.3 views

PT-2025-25179 · WordPress · Zotpress

Name of the Vulnerable Software and Affected Versions: Zotpress plugin for WordPress versions up to, and including, 7.3.15 Description: The issue is related to Stored Cross-Site Scripting via the nickname parameter due to insufficient input sanitization and output escaping. This allows...

6.4CVSS5.7AI score0.00253EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/06/11 12:0 a.m.1 views

WordPress plugin Zotpress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS6AI score0.00253EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 9:50 a.m.3 views

CVE-2024-7429

The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ZotpressprocessaccountsAJAX function in all versions up to, and including, 7.3.12. This makes it possible for authenticated attackers, with Contributor-level access and...

4.3CVSS6.5AI score0.00209EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:48 a.m.4 views

CVE-2024-34569

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through = 7.3.9...

6.5CVSS5.9AI score0.00404EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:59 a.m.3 views

CVE-2024-47621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Katie Zotpress zotpress allows Stored XSS.This issue affects Zotpress: from n/a through = 7.3.10...

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:10 a.m.9 views

CVE-2023-32961

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Katie Seaborn Zotpress plugin = 7.3.3 versions...

7.1CVSS5.9AI score0.04703EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:52 a.m.5 views

CVE-2024-30488

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through = 7.3.7...

8.8CVSS7.3AI score0.00386EPSS
Exploits0References1
Rows per page
Query Builder