Lucene search
K

8 matches found

Cvelist
Cvelist
added 2025/06/27 11:52 a.m.9 views

CVE-2025-28956 WordPress Backwp plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphobby Backwp backwp allows Reflected XSS.This issue affects Backwp: from n/a through = 2.0.2...

7.1CVSS0.00185EPSS
Exploits0References1
CVE
CVE
added 2025/06/27 11:52 a.m.11 views

CVE-2025-28956

Backwp (WordPress Backwp plugin) is affected by CVE-2025-28956: a Reflected Cross-Site Scripting vulnerability due to improper input neutralization during web page generation. Affected versions: n/a through 2.0.2. The CVSS data indicates a high-severity impact (7.1) with Network attack vector, re...

7.1CVSS5.9AI score0.00185EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/27 11:52 a.m.2 views

CVE-2025-28956 WordPress Backwp plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphobby Backwp backwp allows Reflected XSS.This issue affects Backwp: from n/a through = 2.0.2...

7.1CVSS5.2AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

WordPress plugin Backwp 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS5.9AI score0.00185EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 12:54 p.m.10 views

CVE-2025-28954 WordPress Backwp plugin <= 2.0.2 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in wphobby Backwp backwp allows Path Traversal.This issue affects Backwp: from n/a through = 2.0.2...

7.4CVSS0.00077EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 12:54 p.m.4 views

CVE-2025-28954 WordPress Backwp plugin <= 2.0.2 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in wphobby Backwp backwp allows Path Traversal.This issue affects Backwp: from n/a through = 2.0.2...

7.4CVSS5.2AI score0.00077EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.2 views

WordPress plugin Backwp 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

7.4CVSS7.2AI score0.00077EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/06/05 1:35 a.m.8 views

WordPress Backwp plugin <= 2.0.2 - CSRF to Arbitrary File Deletion vulnerability

CSRF to Arbitrary File Deletion vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Backwp versions = 2.0.2...

7.4CVSS6.8AI score0.00077EPSS
Exploits0Affected Software1
Rows per page
Query Builder