Lucene search
+L

857 matches found

CNNVD
CNNVD
added 2025/09/22 12:00 a.m.8 views

WordPress plugin Double the Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.6 views

PT-2025-38780

Name of the Vulnerable Software and Affected Versions Double the Donation versions through 2.0.0 Description The Double the Donation software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious...

5.9CVSS6.1AI score0.0024EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.7 views

WordPress plugin Double the Donation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-3128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t...

4.8CVSS6.2AI score0.00576EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2025/09/07 2:32 p.m.8 views

CVE-2025-58842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in givecloud Donation Forms WP by Givecloud donation-forms-by-givecloud allows Stored XSS.This issue affects Donation Forms WP by Givecloud: from n/a through = 1.0.9...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/05 2:15 p.m.7 views

CVE-2025-58842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in givecloud Donation Forms WP by Givecloud donation-forms-by-givecloud allows Stored XSS.This issue affects Donation Forms WP by Givecloud: from n/a through = 1.0.9...

6.5CVSS0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/05 1:45 p.m.18 views

CVE-2025-58842 WordPress Donation Forms WP by Givecloud Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in givecloud Donation Forms WP by Givecloud donation-forms-by-givecloud allows Stored XSS.This issue affects Donation Forms WP by Givecloud: from n/a through = 1.0.9...

6.5CVSS0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 1:45 p.m.5 views

CVE-2025-58842 WordPress Donation Forms WP by Givecloud Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in givecloud Donation Forms WP by Givecloud donation-forms-by-givecloud allows Stored XSS.This issue affects Donation Forms WP by Givecloud: from n/a through = 1.0.9...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/05 1:45 p.m.15 views

CVE-2025-58842

CVE-2025-58842 affects Donation Forms WP by Givecloud (WordPress plugin) up to version 1.0.9. The issue is stored XSS caused by improper input neutralization during web page generation. Likely impact is that stored payloads could be reflected to site users. Public records in the Initial and conne...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/09/05 1:34 p.m.6 views

WordPress Donation Forms WP by Givecloud Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin Donation Forms WP by Givecloud versions = 1.0.9...

6.5CVSS6AI score0.00204EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/09/05 12:00 a.m.7 views

WordPress plugin Donation Forms WP by Givecloud 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/05 12:00 a.m.6 views

PT-2025-36181

Name of the Vulnerable Software and Affected Versions: givecloud Donation Forms WP by Givecloud versions through 1.0.9 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations...

6.5CVSS5.5AI score0.00204EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/23 5:35 a.m.19 views

CVE-2025-7221

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

4.3CVSS6.8AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/21 6:15 a.m.12 views

CVE-2025-7221

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

4.3CVSS5AI score0.00241EPSS
SaveExploits0References3
NVD
NVD
added 2025/08/21 6:15 a.m.36 views

CVE-2025-7221

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

4.3CVSS0.00241EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/21 5:28 a.m.34 views

CVE-2025-7221 GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

4.3CVSS0.00241EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/21 5:28 a.m.36 views

CVE-2025-7221

The CVE concerns GiveWP – Donation Plugin and Fundraising Platform for WordPress (versions

4.3CVSS6.5AI score0.00241EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/21 5:28 a.m.5 views

CVE-2025-7221 GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

4.3CVSS6.7AI score0.00241EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/21 12:00 a.m.9 views

WordPress plugin GiveWP 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization...

4.3CVSS6.3AI score0.00241EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.10 views

wordpress plugin GiveWP 安全漏洞

WordPress GiveWP plugin is an open source online donation system plugin , mainly used to help websites to achieve online fundraising functions , support from simple buttons to complex platforms for multi-dimensional needs . WordPress GiveWP plugin suffers from an information disclosure...

5.3CVSS6.1AI score0.00238EPSS
SaveExploits0References3
Rows per page
Query Builder