Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2025/05/15 8:7 p.m.17 views

CVE-2025-1033 Badgearoo <= 1.0.14 - Admin+ Stored XSS

The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

0.00231EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/15 8:7 p.m.35 views

CVE-2024-13828

The Badgearoo WordPress plugin (

6.1CVSS6.1AI score0.00278EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder