Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

33 matches found

Kitploit
Kitploit•added 2026/09/23 5:24 p.m.•10 views

CVE-2025-11174

CVE-2025-11174: Document Library Lite WordPress プラグインにおける認証なし情報漏洩 キーワード: CVE-2025-11174, Document Library Lite 脆弱性, 情報漏洩, WordPress セキュリティ, 認証なし AJAX エクスプロイト, WordPress プラグイン脆弱性, CWE-862, WordPress ドキュメントプラグインセキュリティ, 認証バイパス, WordPress CVE 2025 目次 概要 脆弱性の詳細 技術的分析 攻撃ベクトル 概念実証...

5.3CVSS5.9AI score0.00349EPSS
SaveExploits2
Packet Storm
Packet Storm•added 2026/03/02 12:00 a.m.•195 views

📄 WordPress Document Library Lite 1.1.6 Information Disclosure

Proof of concept exploit for WordPress Document Library Lite plugin version 1.1.6. The plugin fails to restrict access to an internal AJAX API endpoint allowing unauthenticated attackers to fetch document records exposing sensitive metadata...

5.3CVSS5.9AI score0.00349EPSS
SaveExploits2
RedhatCVE
RedhatCVE•added 2025/12/17 10:03 a.m.•22 views

CVE-2025-67986

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.9CVSS6.4AI score0.00214EPSS
SaveExploits0References1
EUVD
EUVD•added 2025/12/16 9:31 a.m.•12 views

EUVD-2025-203557

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through = 1.1.7...

6.1CVSS5.9AI score0.00214EPSS
SaveExploits0References2
EUVD
EUVD•added 2025/12/16 9:31 a.m.•15 views

EUVD-2025-203558

Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through = 1.1.7...

6.5AI score0.003EPSS
SaveExploits0References2
NVD
NVD•added 2025/12/16 9:16 a.m.•17 views

CVE-2025-67986

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.9CVSS0.00214EPSS
SaveExploits0References1
NVD
NVD•added 2025/12/16 9:16 a.m.•15 views

CVE-2025-67985

Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.3CVSS0.003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/12/16 8:12 a.m.•8 views

CVE-2025-67985 WordPress Document Library Lite plugin <= 1.1.7 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.3CVSS6.6AI score0.003EPSS
SaveExploits0References1
CVE
CVE•added 2025/12/16 8:12 a.m.•27 views

CVE-2025-67986

CVE-2025-67986: Barn2 Plugins Document Library Lite suffers DOM-based XSS due to improper input neutralization during web page generation. Affected: Document Library Lite (Barn2 Plugins) up to version 1.1.7. Impact: potential client-side script execution if user-supplied input is processed on the...

5.9CVSS6AI score0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/12/16 8:12 a.m.•8 views

CVE-2025-67986 WordPress Document Library Lite plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.9CVSS6AI score0.00214EPSS
SaveExploits0References1
CVE
CVE•added 2025/12/16 8:12 a.m.•26 views

CVE-2025-67985

CVE-2025-67985 affects Document Library Lite (WordPress plugin) with an Unauthenticated Insecure Direct Object Reference due to insecure access controls. Impact recorded as medium (CVSS ~5.3) in the source; affected versions are Document Library Lite

5.3CVSS6.6AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/12/16 8:12 a.m.•44 views

CVE-2025-67985 WordPress Document Library Lite plugin <= 1.1.7 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.3CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/12/16 8:12 a.m.•47 views

CVE-2025-67986 WordPress Document Library Lite plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.9CVSS0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/12/16 12:00 a.m.•19 views

PT-2025-51440

Name of the Vulnerable Software and Affected Versions Barn2 Plugins Document Library Lite versions through 1.1.7 Description An authorization bypass exists due to incorrectly configured access control security levels in Barn2 Plugins Document Library Lite. This allows for unauthorized access. The...

6.5AI score0.003EPSS
SaveExploits0References4
CNNVD
CNNVD•added 2025/12/16 12:00 a.m.•14 views

WordPress plugin Document Library Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.9CVSS6AI score0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/12/16 12:00 a.m.•1 views

CVE-2025-67985: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.3CVSS5.9AI score0.003EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2025/12/16 12:00 a.m.•12 views

WordPress plugin Document Library Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/12/16 12:00 a.m.•18 views

PT-2025-51441

Name of the Vulnerable Software and Affected Versions Barn2 Plugins Document Library Lite versions through 1.1.7 Description The Document Library Lite plugin contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS condition. This specif...

6.1CVSS6.2AI score0.00214EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-67986: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through = 1.1.7...

5.9CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2025/12/15 1:30 p.m.•23 views

WordPress Document Library Lite plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Zeeshan Haider in WordPress Plugin Document Library Lite versions = 1.1.7...

6.1CVSS6.1AI score0.00214EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder