24344 matches found
GHSA-CV54-7WV7-QXCW
creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:20+00:00| seen| https://gist.github.com/alon710/315285e1dbcb26134e8af9d7883ff7da 2026-01-24 22:22:13+00:00| seen| https://gist.github.com/alon710/b99cfeea78c9e37689f5786ed7dbe1de 2026-01-24 22:22:16+00:00| seen|...
GHSA-PCHF-49FH-W34R
creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:03+00:00| seen| https://gist.github.com/alon710/5ba593410f73d7efe2ec83cbf0b0474b 2026-01-24 22:19:44+00:00| seen| https://gist.github.com/alon710/53b7c9bb6a9fc67447de87e571471716 2026-01-24 22:19:47+00:00| seen|...
GHSA-RQ6Q-WR2Q-7PGP
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:58+00:00| seen| https://gist.github.com/alon710/95646488f16d926a9285cc4a529b9663 2026-01-24 22:19:14+00:00| seen| https://gist.github.com/alon710/051896da1df2ef30fd27ece334001d8c 2026-01-24 22:19:16+00:00| seen|...
GHSA-HX9Q-6W63-J58V
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:38+00:00| seen| https://gist.github.com/alon710/cee85c1be84448547c73b283504cccd4 2026-01-24 22:17:28+00:00| seen| https://gist.github.com/alon710/ccf28ffef170d8da1ed890bd93dddf00 2026-01-24 22:17:31+00:00| seen|...
GHSA-J8HF-CP34-G4J7
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:32+00:00| seen| https://gist.github.com/alon710/abff48b2f8d201cbbe94fbb821268f85 2026-01-24 22:16:58+00:00| seen| https://gist.github.com/alon710/6776724fc7cb5ec4fc8bfd427ddaca12 2026-01-24 22:17:01+00:00| seen|...
CVE-2026-24128
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:25+00:00| seen| https://gist.github.com/alon710/b2ccaa855b4d2013eefc48e9ed7da224 2026-01-24 22:16:23+00:00| seen| https://gist.github.com/alon710/c84b8b360c1953a2e1190a4145d1a414 2026-01-24 22:16:26+00:00| seen|...
CVE-2026-0994
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:23+00:00| seen| https://gist.github.com/alon710/5baa2e680f8acff42001de482f43ce99 2026-01-24 22:16:11+00:00| seen| https://gist.github.com/alon710/66c5ee0ebadec10c9308f424b9b41e6c 2026-01-24 22:16:14+00:00| seen|...
GHSA-WM8H-26FV-MG7G
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:20+00:00| seen| https://gist.github.com/alon710/280a53f6f2d65fc97e55b7753d13e7b1...
GHSA-JR6H-PWWP-C8G6
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:13+00:00| seen| https://gist.github.com/alon710/3964b00bf082e82780fa93c032dab43f...
CVE-2026-1127
The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the id parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2026-1127
CVE-2026-1127 concerns the WordPress plugin Timeline Event History. The vulnerability is a Reflected Cross-Site Scripting (XSS) via the id parameter in all versions up to and including 3.2, caused by insufficient input sanitization and output escaping. This could allow unauthenticated attackers t...
CVE-2026-1127
The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the id parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2026-1127 Timeline Event History <= 3.2 - Reflected Cross-Site Scripting
The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the id parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2026-24648
creationtimestamp| type| source ---|---|--- 2026-01-24 07:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5oofdy2l26...
PT-2026-4602
The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the id parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
WordPress Plugin: Timeline Event History – Cross-Site Script Vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...
CVE-2025-70390
creationtimestamp| type| source ---|---|--- 2026-01-23 22:15:21+00:00| seen| https://gist.github.com/syrex1013/4e48d04398339d05a77591dffec8a7e0...
CVE-2025-68015
Improper Control of Generation of Code 'Code Injection' vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through = 2.8.5...
CVE-2025-68007
Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...