Lucene search
K

168 matches found

Nuclei
Nuclei
added 8 hours ago7 views

WordPress Front End Users - Reflected XSS

WordPress Front End Users plugin = 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

7.1CVSS7.6AI score0.00621EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/16 2:23 p.m.4 views

CVE-2026-22646

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information like file paths, database errors, or software versions that can be used to map the application's internal structu...

7.5CVSS6.7AI score0.00022EPSS
Exploits0References1
NVD
NVD
added 2026/01/15 2:16 p.m.2 views

CVE-2026-22646

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information like file paths, database errors, or software versions that can be used to map the application's internal structu...

7.5CVSS0.00022EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.2 views

PT-2025-48077

Name of the Vulnerable Software and Affected Versions Contao versions 4.0.0 through 4.13.56 Contao versions 5.3.0 through 5.3.41 Contao versions 5.6.0 through 5.6.4 Description Backend users with control over template closures can execute arbitrary PHP functions without required parameters. The...

6.6CVSS7AI score0.0002EPSS
Exploits0References14
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.3 views

CVE-2025-62072

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

4.3CVSS7AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.3 views

EUVD-2025-35366

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

6.5AI score0.00036EPSS
Exploits0References2
NVD
NVD
added 2025/10/22 3:16 p.m.2 views

CVE-2025-62072

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

4.3CVSS0.00036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.2 views

CVE-2025-62072 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.8 views

CVE-2025-62072 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

4.3CVSS0.00036EPSS
Exploits0References1
CVE
CVE
added 2025/10/22 2:32 p.m.4 views

CVE-2025-62072

CVE-2025-62072 is a missing/broken authorization vulnerability in the WordPress plugin Front End Users (WordPress Front End Users plugin) , affecting versions up to and including 3.2.33. The issue permits access control bypass (Broken Access Control) with no user interaction, as indicated by CVSS...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.2 views

WordPress plugin Front End Users 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/16 1:35 p.m.4 views

WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Front End Users versions = 3.2.33...

4.3CVSS7AI score0.00036EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51674

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00132EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-37485

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.00141EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-38129

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00111EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5444

Malicious code in bioql PyPI...

6.5CVSS9.2AI score0.00102EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-2437

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.0046EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-0514

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01488EPSS
Exploits1References11
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.1 views

CVE-2025-58235 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through = 3.2.35...

6.5CVSS5.9AI score0.00032EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.7 views

CVE-2025-58235 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through = 3.2.35...

6.5CVSS0.00032EPSS
Exploits0References1
Rows per page
Query Builder