Lucene search
K

8 matches found

CNVD
CNVD
added 2025/11/25 12:0 a.m.3 views

WordPress EchBay Admin Security plugin cross-site scripting vulnerability

WordPress EchBay Admin Security plugin is a once widely used security tool designed to provide an extra layer of protection for the WordPress admin backend. The WordPress EchBay Admin Security plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of...

6.1CVSS6.1AI score0.00106EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/24 9:19 a.m.3 views

WordPress EchBay Admin Security plugin <= 1.3.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin EchBay Admin Security versions = 1.3.0...

6.1CVSS6.3AI score0.00106EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/22 8:35 a.m.3 views

CVE-2025-11885

The EchBay Admin Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ebnonce' parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

6.1CVSS5.6AI score0.00106EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/21 9:30 a.m.1 views

EUVD-2025-198397

The EchBay Admin Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ebnonce' parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

6.1CVSS5.2AI score0.00106EPSS
Exploits0References3
CVE
CVE
added 2025/11/21 7:31 a.m.10 views

CVE-2025-11885

CVE-2025-11885 : WordPress EchBay Admin Security plugin suffers a Reflected XSS via the _ebnonce parameter in versions up to 1.3.0 due to insufficient input sanitization and output escaping. Unauthenticated attackers could entice a user to perform an action (e.g., click a link) and have arbitrary...

6.1CVSS5.3AI score0.00106EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/21 7:31 a.m.2 views

CVE-2025-11885 EchBay Admin Security <= 1.3.0 - Reflected Cross-Site Scripting

The EchBay Admin Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ebnonce' parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

6.1CVSS0.00106EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.2 views

WordPress plugin EchBay Admin Security 跨站脚本漏洞

WordPress EchBay Admin Security plugin is a once widely used security tool designed to provide an extra layer of protection for the WordPress admin backend. The WordPress EchBay Admin Security plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of...

6.1CVSS6AI score0.00106EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.2 views

PT-2025-47688

The EchBay Admin Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ' ebnonce' parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.1CVSS5.6AI score0.00106EPSS
Exploits0References3
Rows per page
Query Builder