Lucene search
+L

108624 matches found

RedhatCVE
RedhatCVE
added 2026/01/01 1:34 p.m.11 views

CVE-2025-62125

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anshul Gangrade Custom Background Changer custom-background-changer allows Stored XSS.This issue affects Custom Background Changer: from n/a through = 3.0...

6.5CVSS5.9AI score0.00151EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 6:25 a.m.13 views

CVE-2025-49342

Cross-Site Request Forgery CSRF vulnerability in merzedes Custom Style custom-style allows Stored XSS.This issue affects Custom Style: from n/a through = 1.0...

7.1CVSS5.9AI score0.00112EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 6:25 a.m.19 views

CVE-2025-68885

Cross-Site Request Forgery CSRF vulnerability in page-carbajal Custom Post Status custom-post-status allows Stored XSS.This issue affects Custom Post Status: from n/a through = 1.1.0...

7.1CVSS5.9AI score0.00112EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.9 views

PT-2026-29243

Name of the Vulnerable Software and Affected Versions Versions prior to 2026 affected versions not specified Description An attacker could potentially trigger an out-of-bounds read by sending a specially crafted DNS response packet. This occurs when custom Lua code utilizes the newDNSPacketOverla...

8.2CVSS5.9AI score0.01028EPSS
SaveExploits0References56
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.12 views

PT-2026-28656

Name of the Vulnerable Software and Affected Versions path-to-regexp versions prior to 0.1.13 Description A flawed regular expression is generated when three or more parameters are present within a single segment, separated by characters other than a period .. For example, /:a-:b-:c or...

7.5CVSS5.9AI score0.00496EPSS
SaveExploits1References34
EUVD
EUVD
added 2025/12/31 9:30 p.m.13 views

EUVD-2025-206069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christopher Churchill allows Reflected XSS.This issue affects custom-post-edit: from n/a through 1.0.4...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/31 8:15 p.m.14 views

CVE-2025-23667

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christopher Churchill custom-post-edit front-end-post-edit allows Reflected XSS.This issue affects custom-post-edit: from n/a through = 1.0.4...

7.1CVSS0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 7:54 p.m.39 views

CVE-2025-23667 WordPress custom-post-edit plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christopher Churchill custom-post-edit front-end-post-edit allows Reflected XSS.This issue affects custom-post-edit: from n/a through = 1.0.4...

7.1CVSS0.00174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/31 7:54 p.m.7 views

CVE-2025-23667

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christopher Churchill custom-post-edit front-end-post-edit allows Reflected XSS.This issue affects custom-post-edit: from n/a through = 1.0.4...

7.1CVSS7.2AI score0.00174EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/31 7:54 p.m.28 views

CVE-2025-23667

CVE-2025-23667 concerns WordPress plugin custom-post-edit (

7.1CVSS7.2AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 7:54 p.m.4 views

CVE-2025-23667 WordPress custom-post-edit plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christopher Churchill allows Reflected XSS.This issue affects custom-post-edit: from n/a through 1.0.4...

7.1CVSS6AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/31 5:15 p.m.10 views

CVE-2025-63038

Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through = 7.40...

4.3CVSS0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 4:32 p.m.5 views

CVE-2025-63038 WordPress WP Custom Admin Interface plugin <= 7.40 - Broken Access Control vulnerability

Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through = 7.40...

4.3CVSS5.1AI score0.00242EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 4:32 p.m.21 views

CVE-2025-63038

Technical details for CVE-2025-63038 are not provided in the supplied documents; no affected versions, impact, or remediation are disclosed here. Monitor for updates from NVD/patch sources.

4.3CVSS5.9AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 4:32 p.m.35 views

CVE-2025-63038 WordPress WP Custom Admin Interface plugin <= 7.40 - Broken Access Control vulnerability

Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through = 7.40...

4.3CVSS0.00242EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/31 3:15 p.m.29 views

CVE-2025-62108

Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through = 4.80...

5.4CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 2:18 p.m.4 views

CVE-2025-62108 WordPress Add Custom Codes plugin <= 4.80 - Broken Access Control vulnerability

Missing Authorization vulnerability in SaifuMak Add Custom Codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through 4.80...

5.4CVSS6.6AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 2:18 p.m.18 views

CVE-2025-62108

Technical details for CVE-2025-62108 are not provided in the connected documents; please monitor for updates.

5.4CVSS5.9AI score0.00197EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 2:18 p.m.8 views

EUVD-2025-205948

Missing Authorization vulnerability in SaifuMak Add Custom Codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through 4.80...

5.4CVSS6.5AI score0.00197EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/31 2:18 p.m.38 views

CVE-2025-62108 WordPress Add Custom Codes plugin <= 4.80 - Broken Access Control vulnerability

Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through = 4.80...

5.4CVSS0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder