Lucene search
K

7 matches found

Patchstack
Patchstack
added 2026/04/21 10:5 a.m.4 views

WordPress Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field plugin <= 1.0.6 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by babyhack@OPCIA in WordPress Plugin Contact Form Extender for Divi Save Entries, File Upload & Country Code Field versions = 1.0.6...

5.8AI score
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49904

Malicious code in bioql PyPI...

6.4CVSS8.6AI score0.00254EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/03 11:17 a.m.4 views

CVE-2025-7825 Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...

6.3CVSS0.00127EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/11/15 9:10 p.m.1 views

WordPress Exclusive Divi plugin <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Exclusive Divi versions = 1.4...

6.4CVSS5.7AI score0.00254EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/18 12:0 a.m.2 views

WordPress plugin Divi security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS5.8AI score0.00201EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/08/08 12:0 a.m.2 views

WordPress plugin Divi cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6AI score0.00098EPSS
Exploits0References2
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.15 views

WordPress Ultimate Carousel For Divi plugin <= 4.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ultimate Carousel For Divi plugin versions = 4.3.0. Solution Update the WordPress Ultimate Carousel For Divi plugin to the latest available version at least 4.3.1...

3.7AI score
Exploits0References2Affected Software1
Rows per page
Query Builder