Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.2 views

CVE-2025-23994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Estatebud Estatebud – Properties & Listings estatebud-properties-listings allows Stored XSS.This issue affects Estatebud – Properties & Listings: from n/a through = 5.5.0...

7.1CVSS7.2AI score0.00178EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-3589

Malicious code in bioql PyPI...

7.1CVSS8.9AI score0.00178EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8062

Malicious code in bioql PyPI...

4.3CVSS9AI score0.00149EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/03/27 9:15 a.m.5 views

CVE-2024-13710

The Estatebud – Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.0. This is due to missing or incorrect nonce validation on the 'estatebudsettings' page. This makes it possible for unauthenticated attackers to update...

4.3CVSS6.7AI score0.00149EPSS
Exploits0References1
CVE
CVE
added 2025/03/25 8:22 a.m.52 views

CVE-2024-13710

CVE-2024-13710 affects the WordPress plugin Estatebud – Properties & Listings. It is a Cross-Site Request Forgery vulnerability on the Estatebud_settings page that can let unauthenticated attackers update plugin settings by tricking an admin into performing an action. The issue affects all versio...

4.3CVSS6.7AI score0.00149EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/25 8:22 a.m.3 views

CVE-2024-13710 Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update

The Estatebud – Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.0. This is due to missing or incorrect nonce validation on the 'estatebudsettings' page. This makes it possible for unauthenticated attackers to update...

4.3CVSS6.5AI score0.00149EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/25 12:0 a.m.1 views

WordPress plugin Estatebud 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

4.3CVSS8.5AI score0.00149EPSS
Exploits0References4
NVD
NVD
added 2025/01/21 6:15 p.m.5 views

CVE-2025-23994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Estatebud Estatebud – Properties & Listings estatebud-properties-listings allows Stored XSS.This issue affects Estatebud – Properties & Listings: from n/a through = 5.5.0...

7.1CVSS0.00178EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 5:21 p.m.6 views

CVE-2025-23994 WordPress Estatebud – Properties & Listings plugin <= 5.5.0 - CSRF to Settings Update & Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Estatebud Estatebud – Properties & Listings estatebud-properties-listings allows Stored XSS.This issue affects Estatebud – Properties & Listings: from n/a through = 5.5.0...

7.1CVSS7.2AI score0.00178EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 5:21 p.m.42 views

CVE-2025-23994

CVE-2025-23994 affects the WordPress plugin Estatebud – Properties & Listings (versions n/a–5.5.0). The issue is CSRF to Settings Update that enables Stored XSS due to improper input neutralization during web page generation. Impacts are Stored XSS in Estatebud pages, aligning with a CVSSv3.1 bas...

7.1CVSS7.2AI score0.00178EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/21 5:21 p.m.17 views

CVE-2025-23994 WordPress Estatebud – Properties & Listings plugin <= 5.5.0 - CSRF to Settings Update & Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Estatebud Estatebud – Properties & Listings estatebud-properties-listings allows Stored XSS.This issue affects Estatebud – Properties & Listings: from n/a through = 5.5.0...

7.1CVSS0.00178EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/21 12:0 a.m.2 views

PT-2025-5252 · Unknown · Estatebud – Properties & Listings

Name of the Vulnerable Software and Affected Versions: Estatebud – Properties & Listings versions n/a through 5.5.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

7.1CVSS5.8AI score0.00178EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.1 views

WordPress plugin Estatebud – Properties & Listings 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

7.1CVSS8AI score0.00178EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/20 6:32 p.m.2 views

WordPress Estatebud – Properties & Listings plugin <= 5.5.0 - CSRF to Settings Update & Stored XSS vulnerability

CSRF to Settings Update & Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Estatebud – Properties & Listings versions = 5.5.0...

7.1CVSS6.2AI score0.00178EPSS
Exploits0Affected Software1
Rows per page
Query Builder