Lucene search
+L

83 matches found

CNVD
CNVD
•added 2025/10/13 12:00 a.m.•17 views

WordPress CTL Behance Importer Lite plugin SQL Injection Vulnerability

WordPress CTL Behance Importer Lite is a plugin for importing work from the Behance platform to a WordPress website, mainly used to help creators quickly migrate their work and optimize their website content management. The WordPress CTL Behance Importer Lite plugin suffers from an SQL injection...

8.6CVSS8.3AI score0.00334EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-9884

Malicious code in bioql PyPI...

7.6CVSS8.2AI score0.00633EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-17187

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00283EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-30732

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00223EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-8832

Malicious code in bioql PyPI...

8.5CVSS8.7AI score0.00331EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/03 6:42 a.m.•31 views

CVE-2025-9587

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

6.5CVSS7.6AI score0.00334EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/03 12:52 a.m.•16 views

WordPress CTL Behance Importer Lite plugin <= 1.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin CTL Behance Importer Lite versions = 1.0...

8.6CVSS7.8AI score0.00334EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/10/02 6:15 a.m.•22 views

CVE-2025-9587

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

8.6CVSS0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/02 6:00 a.m.•44 views

CVE-2025-9587 CTL Behance Importer Lite <= 1.0 - Unauthenticated SQL Injection

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/02 6:00 a.m.•8 views

CVE-2025-9587 CTL Behance Importer Lite <= 1.0 - Unauthenticated SQL Injection

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

5.9AI score0.00334EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/02 6:00 a.m.•39 views

CVE-2025-9587

The CTL Behance Importer Lite WordPress plugin (versions through 1.0 ) is vulnerable to an unauthenticated SQL injection . The flaw exists because the plugin fails to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action . An attacker can exploit this lack...

8.6CVSS5.9AI score0.00334EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/02 12:00 a.m.•18 views

WordPress plugin CTL Behance Importer Lite 安全漏洞

WordPress CTL Behance Importer Lite is a plugin for importing work from the Behance platform to a WordPress website, mainly used to help creators quickly migrate their work and optimize their website content management. The WordPress CTL Behance Importer Lite plugin suffers from an SQL injection...

8.6CVSS8.2AI score0.00334EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/02 12:00 a.m.•5 views

CVE-2025-9587: Undefined Security Weakness

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

8.6CVSS5.9AI score0.00334EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/02 12:00 a.m.•23 views

PT-2025-40322

Name of the Vulnerable Software and Affected Versions CTL Behance Importer Lite WordPress plugin versions through 1.0 Description The software does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action. This allows for SQL injection, and the issue is...

6.5CVSS7.2AI score0.00334EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/09/24 6:30 p.m.•12 views

CVE-2025-57913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through = 1.7.5...

6.5CVSS5.9AI score0.00223EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/22 7:35 p.m.•17 views

WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Behance Portfolio Manager versions = 1.7.5...

6.5CVSS5.9AI score0.00223EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/09/22 7:15 p.m.•13 views

CVE-2025-57913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through = 1.7.5...

6.5CVSS0.00223EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:25 p.m.•22 views

CVE-2025-57913

CVE-2025-57913 is a Stored Cross-Site Scripting (XSS) vulnerability affecting Behance Portfolio Manager (WordPress) up to version 1.7.4. The issue is described as an improper neutralization of input during web page generation. The connected Wordfence detail confirms the vulnerability class and af...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:25 p.m.•3 views

CVE-2025-57913 WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through = 1.7.5...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:25 p.m.•20 views

CVE-2025-57913 WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through = 1.7.5...

6.5CVSS0.00223EPSS
SaveExploits0References1
Rows per page
Query Builder