Lucene search
K

48 matches found

RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.3 views

CVE-2026-24555

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through = 2.23.2...

6.5CVSS5.9AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.2 views

CVE-2026-24555

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through = 2.23.2...

6.5CVSS0.00064EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.1 views

CVE-2026-24555

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through = 2.23.1...

6.1CVSS5.9AI score0.00064EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/23 2:28 p.m.1 views

CVE-2026-24555 WordPress ArtPlacer Widget plugin <= 2.23.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through = 2.23.2...

6.5CVSS5.9AI score0.00064EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:28 p.m.5 views

CVE-2026-24555

CVE-2026-24555 : WordPress ArtPlacer Widget (artplacer-widget) is affected by a stored XSS due to improper input handling in the package’s web page generation. Affected product/version: ArtPlacer Widget up to and including 2.23.1. Evidence from multiple sources confirms the vulnerability and the ...

6.5CVSS5.9AI score0.00064EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/23 2:28 p.m.21 views

CVE-2026-24555 WordPress ArtPlacer Widget plugin <= 2.23.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through = 2.23.2...

6.5CVSS0.00064EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.2 views

WordPress plugin ArtPlacer Widget has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00064EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.4 views

PT-2026-4397

Name of the Vulnerable Software and Affected Versions artplacer ArtPlacer Widget versions through 2.23.1 Description The ArtPlacer Widget contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This can potentially allow an...

6.1CVSS5.3AI score0.00064EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/22 8:40 a.m.3 views

WordPress ArtPlacer Widget plugin <= 2.23.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jitlada in WordPress Plugin ArtPlacer Widget versions = 2.23.1...

6.1CVSS5.3AI score0.00064EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2025/12/12 12:0 a.m.1 views

WordPress ArtPlacer Widget plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the WordPress ArtPlacer Widget plugin that stems from the application's lack of validation of externally entered SQL statements. No...

9.8CVSS8AI score0.00034EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 2:23 p.m.1 views

CVE-2025-67517

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

8.5CVSS7.7AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202127

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

7.1AI score0.00034EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-67517

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

8.5CVSS0.00034EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.1 views

CVE-2025-67517 WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

8.5CVSS7.3AI score0.00034EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:13 p.m.5 views

CVE-2025-67517

The CVE describes an SQL Injection vulnerability in the WordPress ArtPlacer Widget plugin (versions up to and including 2.22.9.2). The issue arises from improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. Affected component: ArtPlacer Widget plugin for WordP...

8.5CVSS7.3AI score0.00034EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.17 views

CVE-2025-67517 WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

8.5CVSS0.00034EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.1 views

PT-2025-49893

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Blind SQL Injection.This issue affects ArtPlacer Widget: from n/a through = 2.22.9.2...

9.8CVSS7.7AI score0.00034EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.1 views

WordPress plugin ArtPlacer Widget SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the WordPress ArtPlacer Widget plugin that stems from the application's lack of validation of externally entered SQL statements. No...

8.5CVSS8AI score0.00034EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/23 3:0 p.m.2 views

WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin ArtPlacer Widget versions = 2.22.9.2...

9.8CVSS8.1AI score0.00034EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-58614

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00224EPSS
Exploits2References2
Rows per page
Query Builder