Lucene search
+L

9 matches found

Patchstack
Patchstack
•added 2026/02/03 4:14 a.m.•12 views

WordPress bodi0’s Easy Cache plugin <= 0.8 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Lokesh Dachepalli in WordPress Plugin bodi0’s Easy Cache versions = 0.8...

4.4CVSS8.1AI score0.00394EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-51008

Malicious code in bioql PyPI...

4.4CVSS9AI score0.00394EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 6:20 a.m.•16 views

CVE-2024-12628

The bodi0s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS5.8AI score0.00394EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/14 7:15 a.m.•30 views

CVE-2024-12628

The bodi0s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS0.00394EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/14 6:45 a.m.•55 views

CVE-2024-12628

CVE-2024-12628 (bodi0’s Easy Cache, WordPress) Stored Cross-Site Scripting vulnerability in the cache storing path parameter (cache-folder) affects all versions up to 0.8. Exploitation requires authenticated admin+ privileges and is limited to multi-site deployments and sites where unfiltered_htm...

4.4CVSS4.4AI score0.00394EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/14 6:45 a.m.•35 views

CVE-2024-12628 bodi0’s Easy Cache <= 0.8 - Authenticated (Admin+) Stored Cross-Site Scripting

The bodi0s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS0.00394EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/14 12:00 a.m.•1 views

CVE-2024-12628: Improper Neutralization of Input During Web Page Generation

The bodi0s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS5.9AI score0.00394EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/14 12:00 a.m.•3 views

PT-2024-17679

Name of the Vulnerable Software and Affected Versions bodi0's Easy cache plugin for WordPress versions up to, and including, 0.8 Description The vulnerability is a Stored Cross-Site Scripting issue via the cache-folder parameter due to insufficient input sanitization and output escaping. This...

4.4CVSS0.00394EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/12/14 12:00 a.m.•15 views

WordPress plugin Easy cache 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.4CVSS8AI score0.00394EPSS
SaveExploits0References3
Rows per page
Query Builder