Lucene search
K

18 matches found

CNNVD
CNNVD
added 2026/05/05 12:0 a.m.1 views

WordPress plugin Betheme 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

8.8CVSS6.2AI score0.00264EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/05 12:0 a.m.2 views

WordPress plugin Betheme 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.5CVSS5.8AI score0.0007EPSS
Exploits0References1
CNVD
CNVD
added 2025/10/15 12:0 a.m.2 views

WordPress Betheme plugin cross-site scripting vulnerability

WordPress Betheme plugin is a WordPress multipurpose theme that is mainly used to quickly build different types of websites such as corporate, blog, e-commerce and so on. WordPress Betheme plugin suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and outp...

6.4CVSS6.2AI score0.00032EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

WordPress plugin Betheme 跨站脚本漏洞

WordPress Betheme plugin is a WordPress multipurpose theme that is mainly used to quickly build different types of websites such as corporate, blog, e-commerce and so on. WordPress Betheme plugin suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and outp...

6.4CVSS5.8AI score0.00032EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-1681

Malicious code in bioql PyPI...

6.4CVSS8.9AI score0.00176EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.2 views

WordPress plugin Betheme 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS4.2AI score0.00164EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/08/05 11:2 p.m.4 views

WordPress Betheme plugin <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Theme Betheme versions = 28.1.3...

6.4CVSS5.8AI score0.00164EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 11:57 a.m.3 views

CVE-2025-0450

The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00176EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.1 views

WordPress plugin Betheme 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6.6AI score0.00447EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/04/15 9:28 p.m.2 views

WordPress Betheme plugin <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Theme Betheme versions = 28.0.3...

6.4CVSS5.8AI score0.00447EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/01/21 11:15 a.m.9 views

CVE-2025-0450

The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00176EPSS
Exploits0References2
OSV
OSV
added 2025/01/21 11:15 a.m.0 views

CVE-2025-0450

The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS7.4AI score
Exploits0References2
Cvelist
Cvelist
added 2025/01/21 11:9 a.m.19 views

CVE-2025-0450 Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00176EPSS
Exploits0References2
CVE
CVE
added 2025/01/21 11:9 a.m.64 views

CVE-2025-0450

CVE-2025-0450 – Betheme (WordPress) stored XSS : Vulnerable in Betheme versions up to 27.6.1 due to insufficient input sanitization and output escaping in the plugin’s custom JS attributes. Exploitation requires authenticated access at contributor level or higher, potentially enabling arbitrary s...

6.4CVSS6AI score0.00176EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/21 12:0 a.m.2 views

PT-2025-3889 · WordPress · Betheme

Name of the Vulnerable Software and Affected Versions: Betheeme plugin for WordPress versions up to, and including, 27.6.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's custom JS functionality due to insufficient input sanitization and output escaping on...

6.4CVSS6.3AI score0.00176EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/06/19 12:0 a.m.2 views

WordPress plugin Betheme security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.6CVSS6.8AI score0.00151EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.3 views

WordPress Plugin BeTheme 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS6.4AI score0.00045EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.2 views

WordPress Plugin BeTheme 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.4AI score0.0009EPSS
Exploits0References2
Rows per page
Query Builder