Lucene search
+L

30 matches found

EUVD
EUVD
•added 2026/04/08 9:31 a.m.•15 views

EUVD-2026-20383

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS5.9AI score0.00313EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 9:16 a.m.•15 views

CVE-2026-39690

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS0.00313EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/08 8:30 a.m.•32 views

CVE-2026-39690

CVE-2026-39690 concerns a Missing Authorization vulnerability in the WordPress plugin “Author Avatars List/Block” (

5.3CVSS6AI score0.00313EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/08 8:30 a.m.•8 views

CVE-2026-39690

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS5.9AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•21 views

PT-2026-31252

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS5.9AI score0.00313EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-39690: Missing Authorization

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS5.9AI score0.00313EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•17 views

CVE-2023-49846

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.17...

6.5CVSS6.7AI score0.00385EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-53754

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00385EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2024-42406

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:42 a.m.•14 views

CVE-2025-22804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

6.5CVSS7.2AI score0.00232EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:00 a.m.•14 views

CVE-2024-47370

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.21...

6.5CVSS5.9AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/09 4:16 p.m.•34 views

CVE-2025-22804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

6.5CVSS0.00232EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/09 3:39 p.m.•8 views

CVE-2025-22804 WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.23...

6.5CVSS7AI score0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 3:39 p.m.•31 views

CVE-2025-22804 WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

6.5CVSS0.00232EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•2 views

CVE-2025-22804: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

6.5CVSS5.8AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•18 views

PT-2025-4713 · Unknown · Author Avatars List/Block

Name of the Vulnerable Software and Affected Versions: Author Avatars List/Block versions prior to 2.1.24 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. This enables an attacker to...

6.5CVSS6.5AI score0.00232EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/01/07 10:12 p.m.•14 views

WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Author Avatars List/Block versions = 2.1.23...

6.5CVSS5.8AI score0.00232EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/10/05 4:15 p.m.•60 views

CVE-2024-47370

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.21...

6.5CVSS0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/05 3:22 p.m.•18 views

CVE-2024-47370 WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.21...

6.5CVSS6.8AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/05 3:22 p.m.•74 views

CVE-2024-47370 WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.21...

6.5CVSS0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder