Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

256 matches found

NVD
NVD•added 2025/04/22 10:15 a.m.•16 views

CVE-2025-46242

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.3...

7.6CVSS0.00345EPSS
SaveExploits0References1
NVD
NVD•added 2025/04/17 4:15 p.m.•12 views

CVE-2025-39594

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Arigato Autoresponder and Newsletter bft-autoresponder allows Reflected XSS.This issue affects Arigato Autoresponder and Newsletter: from n/a through = 2.7.2.4...

7.1CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD•added 2025/04/16 1:15 p.m.•20 views

CVE-2025-39566

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Hostel hostel allows Blind SQL Injection.This issue affects Hostel: from n/a through = 1.1.5.6...

7.6CVSS0.00596EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/04/03 9:41 p.m.•9 views

CVE-2025-30844

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Watu Quiz watu allows Reflected XSS.This issue affects Watu Quiz: from n/a through = 3.4.2...

7.1CVSS7.2AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/04/03 9:43 a.m.•10 views

CVE-2025-30848

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5...

7.1CVSS7.2AI score0.00293EPSS
SaveExploits0References1
NVD
NVD•added 2025/04/01 6:15 a.m.•9 views

CVE-2025-30848

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5...

7.1CVSS0.00293EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/03/30 10:19 a.m.•19 views

CVE-2025-31102

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.5...

7.1CVSS7.2AI score0.00211EPSS
SaveExploits0References1
NVD
NVD•added 2025/03/28 10:15 a.m.•9 views

CVE-2025-31102

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.5...

7.1CVSS0.00211EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/03/28 9:39 a.m.•9 views

CVE-2025-31102 WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel allows Reflected XSS. This issue affects Hostel: from n/a through 1.1.5.5...

7.1CVSS7.2AI score0.00211EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2025/03/25 6:43 a.m.•8 views

WordPress Jobs for WordPress plugin < 2.7.11 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Jobs for WordPress versions 2.7.11...

5.9CVSS6.1AI score0.00298EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2025/03/13 4:33 p.m.•7 views

WordPress IP Based Login plugin < 2.4.1 - Log Deletion via CSRF vulnerability

Log Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin IP Based Login versions 2.4.1...

4.3CVSS8.9AI score0.00178EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2025/03/11 7:25 a.m.•8 views

WordPress Coronavirus (COVID-19) Notice Message plugin <= 1.1.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Coronavirus COVID-19 Notice Message versions = 1.1.2...

4.8CVSS8.2AI score0.00246EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2025/03/11 7:16 a.m.•5 views

WordPress XV Random Quotes plugin <= 2.6.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Bob Matyas in WordPress Plugin XV Random Quotes versions = 2.6.0...

4.3CVSS8.4AI score0.00157EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2025/03/10 5:44 p.m.•7 views

WordPress Contact Us By Lord Linus plugin <= 2.6 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Contact Us By Lord Linus versions = 2.6...

6.1CVSS8.2AI score0.00165EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2025/03/04 1:8 a.m.•6 views

WordPress Social Share And Social Locker – ARSocial plugin <= 1.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Social Share And Social Locker versions = 1.4.1...

4.8CVSS5.7AI score0.00266EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2025/03/04 1:5 a.m.•5 views

WordPress Limit Bio plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Limit Bio versions = 1.0...

7.1CVSS5.9AI score0.00145EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2025/03/04 12:57 a.m.•7 views

WordPress URL Shortener WooCommerce plugin <= 9.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin URL Shortener | Conversion Tracking | AB Testing | WooCommerce versions = 9.0.2...

3.5CVSS5.8AI score0.00296EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE•added 2025/02/26 3:31 p.m.•30 views

CVE-2025-27353

Cross-Site Request Forgery CSRF vulnerability in Bob Namaste! LMS namaste-lms allows Cross Site Request Forgery.This issue affects Namaste! LMS: from n/a through = 2.6.5...

4.3CVSS7.2AI score0.00151EPSS
SaveExploits0References1
NVD
NVD•added 2025/02/24 3:15 p.m.•10 views

CVE-2025-27353

Cross-Site Request Forgery CSRF vulnerability in Bob Namaste! LMS namaste-lms allows Cross Site Request Forgery.This issue affects Namaste! LMS: from n/a through = 2.6.5...

4.3CVSS0.00151EPSS
SaveExploits0References1
CVE
CVE•added 2025/02/24 2:49 p.m.•63 views

CVE-2025-27353

CVE-2025-27353 describes a Cross-Site Request Forgery (CSRF) vulnerability in Namaste! LMS, affecting Namaste! LMS versions from n/a up to and including 2.6.5. The vulnerability is confirmed in multiple sources (e.g., Patchstack reference for WordPress Namaste! LMS Plugin

4.3CVSS7.2AI score0.00151EPSS
SaveExploits0References1
Rows per page
Query Builder