Lucene search
+L

11690 matches found

CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•21 views

WordPress Plugin Portfolio Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8.1AI score0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•21 views

WordPress plugin – WordPress Book Plugin for displaying books in grid, flip, slider, popup layouts, and more. Cross-site scripting vulnerabilities.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin WordPress Book Plugin for Displaying...

6.4CVSS8.1AI score0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•29 views

WordPress plugin Ajax Search Lite has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.7CVSS8.3AI score0.00424EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•19 views

WordPress plugin Arena.IM – Live blogging for real-time events. Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.4CVSS8.1AI score0.00314EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•17 views

WordPress plugin Arena.IM – Live blogging for real-time events. Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.4CVSS8.1AI score0.00257EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•19 views

WordPress plugin PowerBI Embed Reports: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8.1AI score0.00489EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•17 views

WordPress plugin Surbma | SalesAutopilot Shortcode Cross-site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.4CVSS8.1AI score0.00384EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•25 views

Habitica cross-site scripting vulnerability

Habitica is an open source habit-forming program open-sourced by HabitRPG. A cross-site scripting vulnerability exists in Habitica versions prior to 5.28.5 that stems from incorrect cleanup functionality and is susceptible to reflective cross-site scripting attacks...

6.2CVSS5.5AI score0.00459EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•18 views

WordPress plugin LearnPress has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS8.3AI score0.0038EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•18 views

WordPress plugin: Horizontal scroll image slideshow – Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.4CVSS8.1AI score0.0045EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•22 views

WordPress plugin Gutenberg Blocks and Page Layouts – Attire Blocks cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A cross-site scripting vulnerabilit...

6.4CVSS8.1AI score0.0046EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/12/11 12:00 a.m.•22 views

Incomplete SOAP Request Handler DoS

The vulnerability of the Incomplete SOAP Request Handler component in the TP-Link VN020 F3vT wireless router software relates to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failure remotely...

6.5CVSS6.9AI score0.09366EPSS
SaveExploits2References4Affected Software1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•19 views

WordPress Plugin System Dashboard has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

6.1CVSS7.9AI score0.00342EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•21 views

Mitel MiCollab security vulnerabilities

Mitel MiCollab is a mobile application that provides voice, video, messaging, audio conferencing, and team collaboration for employees from Mitel Canada. A security vulnerability exists in Mitel MiCollab that stems from insufficient input cleanup. An authenticated attacker with administrator...

4.4CVSS7.5AI score0.38155EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2024/12/09 1:15 p.m.•16 views

CVE-2023-29431

Missing Authorization vulnerability in Amir Helzer qTranslate X Cleanup and WPML Import qtranslate-to-wpml-export allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through = 3.0.1...

4.3CVSS5.8AI score0.00395EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/09 11:31 a.m.•67 views

CVE-2023-29431

CVE-2023-29431 is a WordPress plugin vulnerability affecting the qTranslate X Cleanup and WPML Import feature in OntheGoSystems’ plugin. The issue is a Missing/Broken Authorization vulnerability (incorrectly configured access control) that affects versions from n/a up to 3.0.1. The vulnerability ...

4.3CVSS8.6AI score0.00395EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:31 a.m.•33 views

CVE-2023-29431 WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through 3.0.1...

4.3CVSS0.00395EPSS
SaveExploits0References1
osv_mal
osv_mal
•added 2024/12/09 5:03 a.m.•10 views

MAL-2024-11456 Malicious code in solara-cleanup (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/09 5:03 a.m.•5 views

Malicious code in solara-cleanup (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•9 views

CVE-2023-29431: Missing Authorization

Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through 3.0.1...

4.3CVSS8.7AI score0.00395EPSS
SaveExploits0References1
Rows per page
Query Builder