Lucene search
K

6 matches found

Patchstack
Patchstack
added 2026/01/30 7:32 a.m.3 views

WordPress ConvertForce Popup Builder plugin <= 0.0.7 - Stored Cross-Site Scripting via entrance_animation vulnerability

Stored Cross-Site Scripting via entranceanimation vulnerability discovered by WordFence in WordPress Plugin ConvertForce Popup Builder versions = 0.0.7...

6.4CVSS5.9AI score0.00192EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/01/10 12:15 p.m.2 views

CVE-2025-14506

The ConvertForce Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gutenberg block's entranceanimation attribute in all versions up to, and including, 0.0.7. This is due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00192EPSS
Exploits0References4
CVE
CVE
added 2026/01/10 11:22 a.m.14 views

CVE-2025-14506

CVE-2025-14506 affects the WordPress plugin ConvertForce Popup Builder (versions up to 0.0.7). The issue is Stored Cross-Site Scripting via the Gutenberg block’s entrance_animation attribute caused by insufficient input sanitization and output escaping. The vulnerability can be exploited by authe...

6.4CVSS4.7AI score0.00192EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/10 11:22 a.m.21 views

CVE-2025-14506 ConvertForce Popup Builder <= 0.0.7 - Stored Cross-Site Scripting via entrance_animation

The ConvertForce Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gutenberg block's entranceanimation attribute in all versions up to, and including, 0.0.7. This is due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00192EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/10 11:22 a.m.2 views

CVE-2025-14506 ConvertForce Popup Builder <= 0.0.7 - Stored Cross-Site Scripting via entrance_animation

The ConvertForce Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gutenberg block's entranceanimation attribute in all versions up to, and including, 0.0.7. This is due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS4.7AI score0.00192EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/10 12:0 a.m.3 views

WordPress plugin ConvertForce Popup Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00192EPSS
Exploits0References5
Rows per page
Query Builder