CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Vulnrichment•added 2026/02/20 3:46 p.m.•2 views

CVE-2025-68531 WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Object Injection.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

5.3AI score0.00071EPSS

Exploits0References1

Patchstack•added 2026/01/27 11:27 a.m.•4 views

WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ModelTheme Addons for WPBakery and Elementor versions 1.5.6...

8.8CVSS5.9AI score0.00071EPSS

Exploits0Affected Software1

Vulnrichment•added 2025/12/24 12:31 p.m.•1 views

CVE-2025-68532 WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS5.6AI score0.00029EPSS

Exploits0References1

Patchstack•added 2025/12/17 7:25 a.m.•3 views

WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ModelTheme Addons for WPBakery and Elementor versions 1.5.6...

5.4CVSS6.1AI score0.00029EPSS

Exploits0Affected Software1

Tenable Nessus•added 2025/01/17 12:0 a.m.•3 views

Roundcube Webmail 1.5.x < 1.5.6 Cross-Site-Scripting

According to its self-reported version number, Roundcube Webmail is prior to 1.5.6 or 1.6.x prior to 1.6.5. Therefore, it may be affected by a Cross-Site Scripting XSS vulnerability via a Content-Type or Content-Disposition header. Note that the scanner has not tested for these issues but has...

6.1CVSS6AI score0.00498EPSS

Exploits0References2

Patchstack•added 2024/04/24 8:42 a.m.•2 views

WordPress Better Comments plugin < 1.5.6 - Subscriber+ Stored XSS vulnerability

Subscriber+ Stored XSS vulnerability discovered by Nicolo in WordPress Plugin Better Comments versions 1.5.6...

5.4CVSS6.1AI score0.00417EPSS

Exploits2References1Affected Software1

Patchstack•added 2024/04/24 8:38 a.m.•2 views

WordPress Better Comments plugin < 1.5.6 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Nicolo in WordPress Plugin Better Comments versions 1.5.6...

5.4CVSS6.1AI score0.00125EPSS

Exploits2References1Affected Software1