Lucene search
+L

71 matches found

NVD
NVD
•added 2026/07/23 12:18 p.m.•17 views

CVE-2026-65528

Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/23 11:19 a.m.•12 views

CVE-2026-65528

Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/23 11:19 a.m.•16 views

CVE-2026-65528 WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/23 11:19 a.m.•25 views

CVE-2026-65528

The CVE-2026-65528 entry concerns the WordPress BSK PDF Manager plugin (versions up to 3.8) with a Cross Site Scripting (XSS) vulnerability. The root cause is XSS in this plugin version, affecting the product where user input is not properly sanitized. The documents do not provide details on the ...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/07/23 9:09 a.m.•10 views

WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by luc in WordPress Plugin BSK PDF Manager versions = 3.8...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•21 views

PT-2026-63939

Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•1 views

CVE-2026-65528: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 a.m.•8 views

CVE-2026-39686 WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through = 3.7.2...

5.3CVSS5.9AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/08 8:30 a.m.•41 views

CVE-2026-39686

Summary (CVE-2026-39686) : The vulnerability affects the WordPress plugin BSK PDF Manager (bsk-pdf-manager) versions up to and including 3.7.2. It enables the Exposure of Sensitive System Information to an unauthorized control sphere, allowing retrieval of embedded sensitive data. The available d...

5.3CVSS5.9AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•38 views

CVE-2026-39686 WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through = 3.7.2...

5.3CVSS0.0031EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•0 views

CVE-2026-39686: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through = 3.7.2...

5.3CVSS5.8AI score0.0031EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•37 views

PT-2026-31248

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through = 3.7.2...

5.9AI score0.0031EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 12:48 p.m.•41 views

CVE-2014-4944

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 categoryid or 2 pdfid parameter to wp-admin/admin.php...

6.5CVSS8.5AI score0.03553EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2025/12/13 8:07 a.m.•12 views

CVE-2025-4970

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access an...

5.5CVSS5AI score0.003EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/12 8:15 a.m.•21 views

CVE-2025-4970

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access an...

5.5CVSS0.003EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/12 7:20 a.m.•15 views

EUVD-2025-203053

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access an...

5.5CVSS4.6AI score0.003EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/12 7:20 a.m.•56 views

CVE-2025-4970 BSK PDF Manager <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access an...

5.5CVSS0.003EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/12 7:20 a.m.•6 views

CVE-2025-4970 BSK PDF Manager <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access an...

5.5CVSS4.7AI score0.003EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/12/12 12:15 a.m.•20 views

WordPress BSK PDF Manager plugin <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by rajanhoyr in WordPress Plugin BSK PDF Manager versions = 3.7.1...

5.5CVSS5.5AI score0.003EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•17 views

WordPress plugin BSK PDF Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. WordPress plugin BSK...

5.5CVSS6.1AI score0.003EPSS
SaveExploits0References3
Rows per page
Query Builder