Lucene search
+L

782 matches found

OSV
OSV
added 2025/10/21 6:30 p.m.5 views

GHSA-9P44-Q66P-XM6P ProcessWire CMS vulnerable to resource-exhaustion Denial of Service

ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service...

7.1CVSS6.9AI score0.00404EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/10/16 8:33 a.m.7 views

CVE-2025-10045

The onOffice for WP-Websites plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 6.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

4.9CVSS5.9AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/15 9:15 a.m.6 views

CVE-2025-10754

The DocoDoco Store Locator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Editor-level access and above, to uploa...

7.2CVSS0.00648EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/15 9:15 a.m.15 views

CVE-2025-10045

The onOffice for WP-Websites plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 6.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

4.9CVSS0.00344EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/15 8:25 a.m.2 views

CVE-2025-10045 onOffice for WP-Websites <= 5.7 - Authenticated (Editor+) SQL Injection

The onOffice for WP-Websites plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS6.2AI score0.00344EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/15 8:25 a.m.11 views

CVE-2025-10754 DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload

The DocoDoco Store Locator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Editor-level access and above, to uploa...

7.2CVSS0.00648EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-14450

Malware in sbrugna...

8.8CVSS8.8AI score0.01552EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2008-4488

Malware in sbrugna...

7.5CVSS6.4AI score0.012EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-7496

Malware in sbrugna...

6.1CVSS7.8AI score0.01988EPSS
SaveExploits0References31
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-2387

Malware in sbrugna...

3.5CVSS6.4AI score0.01642EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-2160

Malware in sbrugna...

4.3CVSS6.1AI score0.01223EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-3434

Malware in sbrugna...

6.9CVSS5.5AI score0.0061EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2016-6075

Malware in sbrugna...

6.1CVSS6.3AI score0.01341EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-3531

Malware in sbrugna...

5.4CVSS5.5AI score0.00946EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-0187

Malware in sbrugna...

5.4CVSS5.4AI score0.00536EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2022-5016

Malicious code in bioql PyPI...

3.5CVSS6.3AI score0.01449EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-30476

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00236EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-2510

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.01141EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-25900

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00574EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-5107

Malicious code in bioql PyPI...

4.9CVSS6.3AI score0.01017EPSS
SaveExploits0References7
Rows per page
Query Builder