Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 7:22 a.m.2 views

CVE-2025-11706

The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the dbstatus parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS5.8AI score0.00111EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 7:17 a.m.3 views

CVE-2025-11706

The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the dbstatus parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00111EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/19 3:25 a.m.30 views

CVE-2025-11706 Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Scripting

The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the dbstatus parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00111EPSS
Exploits0References3
CVE
CVE
added 2026/02/19 3:25 a.m.13 views

CVE-2025-11706

CVE-2025-11706 affects the Aruba HiSpeed Cache WordPress plugin up to version 3.0.2, due to insufficient input sanitization and output escaping of the dbstatus parameter. This allows unauthenticated attackers to inject arbitrary web scripts that execute when a user is tricked into performing an a...

6.1CVSS5.8AI score0.00111EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/19 3:25 a.m.2 views

CVE-2025-11706 Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Scripting

The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the dbstatus parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS5.8AI score0.00111EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.4 views

WordPress plugin Aruba HiSpeed Cache 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.7AI score0.00111EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.3 views

PT-2026-20573

Name of the Vulnerable Software and Affected Versions Aruba HiSpeed Cache versions up to and including 3.0.2 Description The Aruba HiSpeed Cache plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the dbstatus parameter. Insufficient input sanitization and output escapin...

6.1CVSS5.3AI score0.00111EPSS
Exploits0References6
Rows per page
Query Builder