Lucene search
+L

751 matches found

Cvelist
Cvelist
•added 2025/01/25 7:24 a.m.•30 views

CVE-2024-13467 WP Contact Form7 Email Spam Blocker <= 1.0.0 - Reflected Cross-Site Scripting

The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS0.00285EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/25 7:24 a.m.•61 views

CVE-2024-13467

The CVE-2024-13467 entry concerns the WordPress plugin WP Contact Form7 Email Spam Blocker. A Reflected Cross-Site Scripting vulnerability exists in the post parameter for all versions up to and including 1.0.0, caused by insufficient input sanitization and output escaping. This allows unauthenti...

6.1CVSS6AI score0.00285EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/25 7:24 a.m.•14 views

CVE-2024-13467 WP Contact Form7 Email Spam Blocker <= 1.0.0 - Reflected Cross-Site Scripting

The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS6.5AI score0.00285EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/25 12:00 a.m.•0 views

CVE-2024-13467: Improper Neutralization of Input During Web Page Generation

The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS6AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/24 6:15 p.m.•33 views

CVE-2025-24731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from n/a through = 2.38.3...

5.9CVSS0.00314EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/24 6:15 p.m.•11 views

CVE-2025-24731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IP2Location Download IP2Location Country Blocker allows Stored XSS. This issue affects Download IP2Location Country Blocker: from n/a through 2.38.3...

4.8CVSS7.3AI score0.00314EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:25 p.m.•82 views

CVE-2025-24731

CVE-2025-24731 = Stored Cross-Site Scripting in WordPress plugin “IP2Location Country Blocker” (versions up to 2.38.3). The issue arises from improper input neutralization during web page generation, enabling attackers to inject malicious scripts that could be stored and later executed in unsuspe...

5.9CVSS7.2AI score0.00314EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/01/24 5:25 p.m.•30 views

CVE-2025-24731 WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from n/a through = 2.38.3...

5.9CVSS0.00314EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•14 views

WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Malvin Valerian Gultom in WordPress Plugin Download IP2Location Country Blocker versions = 2.38.3...

5.9CVSS6.1AI score0.00314EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•15 views

PT-2025-5545 · Ip2Location · Ip2Location Country Blocker

Name of the Vulnerable Software and Affected Versions: IP2Location Country Blocker versions prior to 2.38.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS attacks. This means that an attacker can...

5.9CVSS6.1AI score0.00314EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•2 views

CVE-2025-24731: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from n/a through = 2.38.3...

5.9CVSS5.8AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/12 4:23 a.m.•27 views

CVE-2024-11459 Country Blocker <= 3.2 - Reflected Cross-Site Scripting

The Country Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

6.1CVSS0.00392EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/12 4:23 a.m.•11 views

CVE-2024-11459 Country Blocker <= 3.2 - Reflected Cross-Site Scripting

The Country Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

6.1CVSS6.4AI score0.00392EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•11 views

WordPress plugin Country Blocker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS7.8AI score0.00392EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/12 12:00 a.m.•20 views

PT-2024-17010 · WordPress · Country Blocker

Name of the Vulnerable Software and Affected Versions: Country Blocker plugin for WordPress versions up to, and including, 3.2 Description: The issue is related to Reflected Cross-Site Scripting via the ip parameter due to insufficient input sanitization and output escaping. This allows...

6.1CVSS6.7AI score0.00392EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•2 views

CVE-2024-11459: Improper Neutralization of Input During Web Page Generation

The Country Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

6.1CVSS6AI score0.00392EPSS
SaveExploits0References1
Opera Security Advisories
Opera Security Advisories
•added 2024/12/11 12:00 a.m.•28 views

How Opera for Android’s revamped ad blocker improves your browsing experience

News, Privacy How Opera for Android’s revamped ad blocker improves your browsing experience Share December 11th, 2024 Hi Opera users! At Opera, we know how intrusive advertising can disrupt your browsing experience by turning it into a frustrating maze of pop-ups. That’s why we have included a...

8.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•32 views

CVE-2024-54226

Cross-Site Request Forgery CSRF vulnerability in karlkiesinger Country Blocker country-blocker allows Stored XSS.This issue affects Country Blocker: from n/a through = 3.2...

7.1CVSS0.00196EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:32 a.m.•11 views

CVE-2024-54226 WordPress Country Blocker plugin <= 3.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Karl Kiesinger Country Blocker allows Stored XSS.This issue affects Country Blocker: from n/a through 3.2...

7.1CVSS6.8AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:32 a.m.•33 views

CVE-2024-54226 WordPress Country Blocker plugin <= 3.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in karlkiesinger Country Blocker country-blocker allows Stored XSS.This issue affects Country Blocker: from n/a through = 3.2...

7.1CVSS0.00196EPSS
SaveExploits0References1
Rows per page
Query Builder