Lucene search
+L

120 matches found

Patchstack
Patchstack
added 2026/08/20 11:41 a.m.7 views

WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme FreightCo versions = 1.1.15...

9.8CVSS5.5AI score0.00313EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/14 11:07 a.m.9 views

WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by daroo in WordPress Plugin Extra Product Options & Add-Ons for WooCommerce versions 7.6...

7.5CVSS5.3AI score0.00467EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/14 10:00 a.m.10 views

WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Templately versions = 3.7.1...

7.1CVSS5.1AI score0.00175EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/07 7:37 a.m.8 views

WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by daroo in WordPress Plugin Geo Mashup versions = 1.13.18...

8.1CVSS5.2AI score0.00338EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/07 7:32 a.m.12 views

WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Geo Mashup versions = 1.13.18...

7.1CVSS5.1AI score0.00175EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/04 12:46 p.m.12 views

WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Media LIbrary Assistant versions = 3.38...

7.1CVSS5.4AI score0.00175EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/04 11:46 a.m.9 views

WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by daroo in WordPress Plugin CTX Feed versions = 6.6.42...

9.1CVSS5.7AI score0.00469EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/04 11:14 a.m.12 views

WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Kadence WooCommerce Email Designer versions = 1.5.19...

9.8CVSS5.5AI score0.00321EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/03 12:29 p.m.9 views

WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Forminator versions = 1.56.0...

7.1CVSS5.4AI score0.00175EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/03 12:25 p.m.10 views

WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Forminator versions = 1.56.0...

8.8CVSS5.5AI score0.00278EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/31 6:57 a.m.11 views

WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin SEO Plugin by Squirrly SEO versions = 14.2.0...

7.1CVSS5.4AI score0.00186EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/28 6:59 a.m.9 views

WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin Jeg Kit for Elementor versions = 3.2.10...

5.5AI score0.00359EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:05 a.m.9 views

WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Booking Calendar versions = 11.4.2...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/10 6:51 a.m.13 views

WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Dokan versions = 5.0.6...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/06 2:22 p.m.13 views

WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin ChatBot versions = 8.3.7...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/02 7:11 a.m.17 views

WordPress Ninja Forms - File Uploads plugin <= 3.3.29 - Unauthenticated Arbitrary File Read vulnerability

WordPress Ninja Forms - File Uploads plugin = 3.3.29 - Unauthenticated Arbitrary File Read vulnerability discovered by daroo in WordPress Plugin Ninja Forms File Uploads Extension versions = 3.3.29...

7.5CVSS5.8AI score0.00599EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/06/30 2:59 p.m.12 views

WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Timetics versions = 1.0.58...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/30 11:41 a.m.12 views

WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Optimole versions = 4.2.7...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/30 9:57 a.m.13 views

WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Slider Revolution versions 7.0.0-7.0.16...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/29 2:44 p.m.55 views

WordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin GeekyBot versions = 1.2.5...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder