Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

26 matches found

EUVD
EUVD•added 2026/04/08 9:31 a.m.•0 views

EUVD-2026-20383

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References2
NVD
NVD•added 2026/04/08 9:16 a.m.•1 views

CVE-2026-39690

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS0.0004EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB•added 2026/04/08 8:30 a.m.•1 views

CVE-2026-39690

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References2
CVE
CVE•added 2026/04/08 8:30 a.m.•8 views

CVE-2026-39690

CVE-2026-39690 concerns a Missing Authorization vulnerability in the WordPress plugin “Author Avatars List/Block” (

5.3CVSS5.9AI score0.0004EPSS
Exploits0References1
Positive Technologies
Positive Technologies•added 2026/04/08 12:0 a.m.•2 views

PT-2026-31252

Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through = 2.1.25...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References3
RedhatCVE
RedhatCVE•added 2026/01/09 9:28 a.m.•2 views

CVE-2023-49846

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.17...

6.5CVSS6.7AI score0.00181EPSS
Exploits0References1
EUVD
EUVD•added 2025/10/03 8:7 p.m.•1 views

EUVD-2023-53754

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00181EPSS
Exploits0References1
EUVD
EUVD•added 2025/10/03 8:7 p.m.•14 views

EUVD-2024-42406

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00193EPSS
Exploits0References1
RedhatCVE
RedhatCVE•added 2025/05/23 11:42 a.m.•4 views

CVE-2025-22804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

6.5CVSS7.2AI score0.00178EPSS
Exploits0References1
RedhatCVE
RedhatCVE•added 2025/05/23 9:0 a.m.•2 views

CVE-2024-47370

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.21...

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
NVD
NVD•added 2025/01/09 4:16 p.m.•7 views

CVE-2025-22804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

6.5CVSS0.00178EPSS
Exploits0References1
Vulnrichment
Vulnrichment•added 2025/01/09 3:39 p.m.•6 views

CVE-2025-22804 WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.23...

6.5CVSS7AI score0.00178EPSS
Exploits0References1
Cvelist
Cvelist•added 2025/01/09 3:39 p.m.•15 views

CVE-2025-22804 WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.23...

6.5CVSS0.00178EPSS
Exploits0References1
Positive Technologies
Positive Technologies•added 2025/01/09 12:0 a.m.•1 views

PT-2025-4713 · Unknown · Author Avatars List/Block

Name of the Vulnerable Software and Affected Versions: Author Avatars List/Block versions prior to 2.1.24 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. This enables an attacker to...

6.5CVSS6.5AI score0.00178EPSS
Exploits0References3
Patchstack
Patchstack•added 2025/01/07 10:12 p.m.•3 views

WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Author Avatars List/Block versions = 2.1.23...

6.5CVSS5.8AI score0.00178EPSS
Exploits0Affected Software1
NVD
NVD•added 2024/10/05 4:15 p.m.•9 views

CVE-2024-47370

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.21...

6.5CVSS0.00193EPSS
Exploits0References1
Cvelist
Cvelist•added 2024/10/05 3:22 p.m.•27 views

CVE-2024-47370 WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through = 2.1.21...

6.5CVSS0.00193EPSS
Exploits0References1
Vulnrichment
Vulnrichment•added 2024/10/05 3:22 p.m.•15 views

CVE-2024-47370 WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.21...

6.5CVSS6.8AI score0.00193EPSS
Exploits0References1
CVE
CVE•added 2024/10/05 3:22 p.m.•49 views

CVE-2024-47370

CVE-2024-47370 affects WordPress plugin Author Avatars List/Block (versions

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
Patchstack
Patchstack•added 2024/09/30 10:26 a.m.•6 views

WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0tter Patchstack Alliance in WordPress Plugin Author Avatars List/Block versions = 2.1.21...

6.5CVSS6.1AI score0.00193EPSS
Exploits0Affected Software1
Rows per page
Query Builder