Lucene search
+L

1594 matches found

CNNVD
CNNVD
added 2025/12/12 12:0 a.m.5 views

WordPress plugin Premmerce Wishlist for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00304EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.8 views

WordPress plugin Product Filtering by Categories, Tags, Price Range for WooCommerce – Filter Plus 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Product Filterin...

5.3CVSS6.2AI score0.00254EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.9 views

PT-2025-50814

The Product Filtering by Categories, Tags, Price Range for WooCommerce – Filter Plus plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.1.5 due to a missing capability check on the 'filter save settings' and 'add filter options' AJAX...

5.3CVSS5.5AI score0.00254EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.9 views

WordPress plugin Infility Global 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.8AI score0.00526EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.5 views

WordPress plugin Simple Theme Changer 安全漏洞

...

4.3CVSS5.8AI score0.00168EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/07 6:5 a.m.18 views

CVE-2025-12721

The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the /serverstatus REST API endpoint due to a lack of capability checks. This makes it possible for unauthenticated attackers to extract information about the serv...

5.3CVSS5.6AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/06 6:58 a.m.13 views

CVE-2025-12093

The Voidek Employee Portal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to perform several actions like registering an account,...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/06 5:49 a.m.6 views

CVE-2025-13358 Accessiy By CodeConfig Accessibility <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation

The Accessiy By CodeConfig Accessibility plugin for WordPress is vulnerable to unauthorized page creation due to missing authorization checks in versions up to, and including, 1.0.0. This is due to the plugin not performing capability checks in the Settings::createPage function. This makes it...

5.3CVSS5.2AI score0.0025EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/12/06 5:49 a.m.29 views

CVE-2025-12721 g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the /serverstatus REST API endpoint due to a lack of capability checks. This makes it possible for unauthenticated attackers to extract information about the serv...

5.3CVSS0.00254EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/06 5:49 a.m.3 views

CVE-2025-12721 g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the /serverstatus REST API endpoint due to a lack of capability checks. This makes it possible for unauthenticated attackers to extract information about the serv...

5.3CVSS5.3AI score0.00254EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/06 12:0 a.m.7 views

WordPress plugin g-FFL Cockpit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.2AI score0.00254EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/06 12:0 a.m.7 views

PT-2025-49341

The Accessiy By CodeConfig Accessibility plugin for WordPress is vulnerable to unauthorized page creation due to missing authorization checks in versions up to, and including, 1.0.0. This is due to the plugin not performing capability checks in the Settings::createPage function. This makes it...

5.3CVSS5.5AI score0.0025EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/06 12:0 a.m.8 views

WordPress plugin Listar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.3AI score0.00168EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/06 12:0 a.m.14 views

WordPress plugin Listar – Directory Listing & Classifieds WordPress Plugin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.3CVSS6.2AI score0.00168EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/05 6:7 a.m.9 views

EUVD-2025-201356

The Voidek Employee Portal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 1.0.6. This makes it possible for unauthenticated attackers to perform several actions like registering an account,...

5.3CVSS5AI score0.00241EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/05 6:7 a.m.4 views

CVE-2025-12093 Voidek Employee Portal <= 1.0.6 - Missing Authorization

The Voidek Employee Portal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 1.0.6. This makes it possible for unauthenticated attackers to perform several actions like registering an account,...

5.3CVSS5.1AI score0.00241EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.8 views

WordPress plugin Live CSS Preview 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.2AI score0.00201EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.13 views

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.5 views

WordPress plugin Feedback Modal for Website 安全漏洞

...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.9 views

WordPress plugin Voidek Employee Portal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.00241EPSS
SaveExploits0References2
Rows per page
Query Builder