Lucene search
+L

10274 matches found

Vulnrichment
Vulnrichment
added 2025/04/04 3:59 p.m.8 views

CVE-2025-32261 WordPress Advanced All in One Admin Search by WP Spotlight <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight allows Cross Site Request Forgery. This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through 1.1.1...

4.3CVSS7.2AI score0.00154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/04 3:59 p.m.34 views

CVE-2025-32188 WordPress Advanced Woo Labels plugin <= 2.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through = 2.15...

6.5CVSS0.00376EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/04 3:59 p.m.56 views

CVE-2025-32188

CVE-2025-32188 - Stored XSS in Advanced Woo Labels (WordPress plugin) Affected software: Advanced Woo Labels (a.k.a. Advanced Woo Labels – Product Labels for WooCommerce) versions up to 2.15 (per connected data; CVE notes up to 2.14). Root cause: Improper neutralization of input during web page g...

6.5CVSS7.2AI score0.00376EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/04 3:59 p.m.10 views

CVE-2025-32188 WordPress Advanced Woo Labels plugin <= 2.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels allows Stored XSS. This issue affects Advanced Woo Labels: from n/a through 2.14...

6.5CVSS7AI score0.00376EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/04 1:29 p.m.12 views

WordPress Advanced Woo Labels plugin <= 2.15 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by savphill in WordPress Plugin Advanced Woo Labels versions = 2.15...

6.5CVSS6.9AI score0.00376EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/04 12:00 a.m.12 views

PT-2025-14970 · Unknown · Illid Advanced Woo Labels

Name of the Vulnerable Software and Affected Versions: ILLID Advanced Woo Labels versions n/a through 2.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

6.5CVSS6.8AI score0.00376EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.11 views

WordPress plugin Advanced Woo Labels 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS6.6AI score0.00376EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/03 9:45 p.m.6 views

CVE-2025-31753

Cross-Site Request Forgery CSRF vulnerability in Animesh Kumar Advanced Speed Increaser advanced-speed-increaser.This issue affects Advanced Speed Increaser: from n/a through = 2.2.1...

4.3CVSS7.2AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/03 2:15 p.m.19 views

CVE-2025-31622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Utkarsh Kukreti Advanced Typekit advanced-typekit allows Stored XSS.This issue affects Advanced Typekit: from n/a through = 1.0.1...

6.5CVSS0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/03 1:27 p.m.4 views

CVE-2025-31622 WordPress Advanced Typekit plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Utkarsh Kukreti Advanced Typekit allows Stored XSS. This issue affects Advanced Typekit: from n/a through 1.0.1...

6.5CVSS7AI score0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/03 1:27 p.m.28 views

CVE-2025-31622 WordPress Advanced Typekit plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Utkarsh Kukreti Advanced Typekit advanced-typekit allows Stored XSS.This issue affects Advanced Typekit: from n/a through = 1.0.1...

6.5CVSS0.00258EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/03 1:27 p.m.55 views

CVE-2025-31622

CVE-2025-31622: In the Advanced Typekit WordPress plugin (vulnerable:

6.5CVSS7.2AI score0.00258EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 9:52 a.m.11 views

CVE-2025-30548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VarDump s.r.l. Advanced Post Search advanced-post-search allows Reflected XSS.This issue affects Advanced Post Search: from n/a through = 1.1.0...

7.1CVSS7.2AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.7 views

WordPress plugin Advanced Typekit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.5AI score0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/02 9:21 a.m.5 views

CVE-2025-3099 Advanced Search by My Solr Server <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to upda...

6.1CVSS6.7AI score0.00178EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/02 12:00 a.m.10 views

WordPress plugin Advanced Search by My Solr Server 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.1CVSS6.6AI score0.00178EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2025/04/02 12:00 a.m.8 views

The vulnerability of the configure_lttpr_mode_non_transparent() function in the DRI driver for AMD kernel-based Linux graphics cards allows a attacker to cause a service failure.

The vulnerability of the configurelttprmodenontransparent function in the DRI driver for AMD kernel-based Linux graphics cards is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.0022EPSS
SaveExploits0References9Affected Software2
CNNVD
CNNVD
added 2025/04/02 12:00 a.m.8 views

AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in the AMD NPU driver that stems from an integer overflow that could lead to an out-of-bounds write by a local attacker, impacting confidentiality, integrity, and availability...

7.9CVSS6.7AI score0.00158EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/02 12:00 a.m.13 views

The vulnerability of the `dm_update_mst_vcpi_slots_for_dsc()` function in the Direct Rendering Infrastructure (DRI) driver for AMD kernel-based Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the dmupdatemstvcpislotsfordsc function in the Direct Rendering Infrastructure DRI driver for AMD kernel-based Linux operating systems is related to insufficient validation of input data during division by zero. Exploiting this vulnerability can allow an attacker to cause a...

5.5CVSS6.7AI score0.00239EPSS
SaveExploits0References14Affected Software4
CNNVD
CNNVD
added 2025/04/02 12:00 a.m.12 views

AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that originates from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting confidentiality, integrity, or availability...

7.9CVSS6.8AI score0.00158EPSS
SaveExploits0References2
Rows per page
Query Builder