Lucene search
K

6 matches found

Cvelist
Cvelist
added 2025/12/31 3:22 p.m.20 views

CVE-2025-62755 WordPress GS Portfolio for Envato plugin <= 1.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Portfolio for Envato: from n/a through = 1.4.2...

5.3CVSS0.00036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 3:22 p.m.2 views

CVE-2025-62755 WordPress GS Portfolio for Envato plugin <= 1.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Portfolio for Envato: from n/a through = 1.4.2...

5.3CVSS5.9AI score0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.1 views

WordPress plugin License For Envato 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7AI score0.00669EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/10 12:22 p.m.3 views

WordPress License For Envato Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin License For Envato versions = 1.0.0...

7.1CVSS6.9AI score0.00669EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2023/02/21 12:0 a.m.2 views

WordPress plugin GS Portfolio for Envato 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS6.4AI score0.00198EPSS
Exploits2References2
ThreatPost
ThreatPost
added 2021/08/31 4:12 p.m.25 views

WooCommerce Pricing Plugin Allows Malicious Code-Injection

A pair of security vulnerabilities in the WooCommerce Dynamic Pricing and Discounts plugin from Envato could allow unauthenticated attackers to inject malicious code into websites running unpatched versions. This can result in a variety of attacks, including website redirections to phishing pages...

6.8AI score
Exploits0References5
Rows per page
Query Builder