Lucene search
+L

74 matches found

Cvelist
Cvelist
•added 2025/01/15 3:23 p.m.•57 views

CVE-2025-22587 WordPress SEO Bulk Editor plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atanas Krachev SEO Bulk Editor seo-bulk-editor allows Stored XSS.This issue affects SEO Bulk Editor: from n/a through = 1.1.0...

6.5CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/15 3:23 p.m.•84 views

CVE-2025-22587

CVE-2025-22587: SEO Bulk Editor for WordPress is affected by a stored XSS due to improper input neutralization during web page generation. The vulnerability affects SEO Bulk Editor up to version 1.1.0 (n/a through 1.1.0) and has a CVSSv3.1 base score of 6.5 (Medium). According to Wordfence, the p...

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/15 12:00 a.m.•14 views

WordPress plugin SEO Bulk Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.0028EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2024/05/16 12:00 a.m.•17 views

WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.8.2 due to insufficient input sanitization and output escaping. This makes it possible for...

5.9CVSS5.9AI score0.00276EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/03/31 8:15 p.m.•31 views

CVE-2024-31091

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/31 7:25 p.m.•15 views

CVE-2024-31091 WordPress Custom Field Bulk Editor plugin <= 1.9.1 - Cross Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/31 7:25 p.m.•93 views

CVE-2024-31091

CVE-2024-31091 is a reflected XSS in the WordPress plugin Custom Field Bulk Editor by SparkWeb Interactive, affecting versions from n/a through 1.9.1. The provided sources do not include a confirmed patch or mitigation details.

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/03/31 12:00 a.m.•16 views

PT-2024-23759 · Unknown · Custom Field Bulk Editor

Name of the Vulnerable Software and Affected Versions: Custom Field Bulk Editor versions 1.9.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the Custom Field Bulk...

7.1CVSS9.3AI score0.00354EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/29 11:24 a.m.•12 views

WordPress Custom Field Bulk Editor plugin <= 1.9.1 - Cross Site Scripting vulnerability

Cross Site Scripting vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Custom Field Bulk Editor versions = 1.9.1...

7.1CVSS8AI score0.00354EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/03/29 12:00 a.m.•15 views

WordPress Custom Field Bulk Editor Plugin <= 1.9.1 is vulnerable to Cross Site Scripting (XSS)

Software Custom Field Bulk Editor Type Plugin Vulnerable versions = 1.9.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31091 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c632d030391c Credits Dimas Maulana Required...

7.1CVSS6.5AI score0.00354EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/02/08 2:15 p.m.•14 views

CVE-2024-24834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net allows Stored XSS.This issue affects BEAR – Bulk Editor and Products Manager Professional for...

4.8CVSS7.3AI score0.00316EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/02/08 12:00 a.m.•17 views

PT-2024-20601 · Pluginus.Net · Bear – Bulk Editor/Products Manager Professional For Woocommerce

Name of the Vulnerable Software and Affected Versions: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net versions 1.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site...

5.9CVSS5.7AI score0.00316EPSS
SaveExploits0References4
OSV
OSV
•added 2024/02/05 10:16 p.m.•13 views

CVE-2024-0790

The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.1. This is due to missing or incorrect nonce validation on the wpbecreatenewterm, wpbeupdatetaxterm, and wpbedeletetaxterm...

4.3CVSS7.1AI score0.00312EPSS
SaveExploits0References3
CVE
CVE
•added 2024/02/05 9:21 p.m.•117 views

CVE-2024-0790

CVE-2024-0790 (WOLF – WordPress Posts Bulk Editor and Manager Professional) is a CSRF vulnerability in the WordPress plugin, affecting versions up to 1.0.8.1. The issue stems from missing or incorrect nonce validation on functions wpbe_create_new_term, wpbe_update_tax_term, and wpbe_delete_tax_te...

5.4CVSS5.2AI score0.00312EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/01/31 6:12 p.m.•101 views

CVE-2024-22159

CVE-2024-22159 affects WOLF – WordPress Posts Bulk Editor and Manager Professional (versions up to 1.0.8). The vulnerability is improper neutralization of input during web page generation, leading to a Reflected XSS. Impact is a client-side script injection through input that is not properly sani...

7.1CVSS7AI score0.00331EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/01/30 12:00 a.m.•18 views

WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.2 - Cross-Site Request Forgery

Description The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.1. This is due to missing or incorrect nonce validation on the wpbecreatenewterm, wpbeupdatetaxterm, and...

4.3CVSS6.5AI score0.00312EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/10/25 6:17 p.m.•23 views

CVE-2023-46152

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

8.8CVSS7.3AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•41 views

CVE-2023-46152

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/25 6:17 p.m.•22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.7.1 versions...

6.8CVSS8.8AI score0.00271EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•18 views

WordPress Plugin WOLF Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WOLF - WordPress Posts Bul...

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder