Lucene search
+L

24749 matches found

Circl
Circl
added 2025/01/25 5:06 p.m.8 views

GHSA-C52R-R6J6-X3C5

creationtimestamp| type| source ---|---|--- 2025-01-25 17:06:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3102...

4.8AI score
SaveExploits0References1
Circl
Circl
added 2025/01/25 5:06 p.m.6 views

GHSA-M2FR-34QC-XRJJ

creationtimestamp| type| source ---|---|--- 2025-01-25 17:06:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3098...

4.8AI score
SaveExploits0References1
Circl
Circl
added 2025/01/25 5:06 p.m.6 views

GHSA-QJP6-CP7G-V8XV

creationtimestamp| type| source ---|---|--- 2025-01-25 17:06:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3096...

4.8AI score
SaveExploits0References1
Circl
Circl
added 2025/01/24 9:06 p.m.12 views

CVE-2025-0705

creationtimestamp| type| source ---|---|--- 2025-01-24 21:06:16+00:00| seen| https://t.me/cvedetector/16338...

6.9CVSS4.5AI score0.00377EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/24 6:15 p.m.32 views

CVE-2025-24683

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through = 2.7.14...

7.6CVSS0.00585EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/24 6:15 p.m.28 views

CVE-2025-24585

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.9.7...

6.5CVSS0.00368EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 5:24 p.m.75 views

CVE-2025-24683

CVE-2025-24683 concerns the WordPress plugin WPChill RSVP and Event Management . Public records state an SQL injection vulnerability due to improper neutralization of special elements in SQL commands, affecting the plugin versions “n/a through 2.7.14.” The root cause is a failure to properly sani...

7.6CVSS7.3AI score0.00585EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 5:24 p.m.15 views

CVE-2025-24683 WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through = 2.7.14...

7.6CVSS8.9AI score0.00585EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 5:24 p.m.41 views

CVE-2025-24683 WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through = 2.7.14...

7.6CVSS0.00585EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 5:24 p.m.10 views

CVE-2025-24585 WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.9.7...

6.5CVSS7.2AI score0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 5:24 p.m.56 views

CVE-2025-24585 WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.9.7...

6.5CVSS0.00368EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 5:24 p.m.62 views

CVE-2025-24585

CVE-2025-24585 is a stored XSS vulnerability in the WordPress plugin “Event post” (N.O.U.S. Open Useful and Simple Event post), affecting versions up to and including 5.9.7. The issue arises from improper neutralization of input during web page generation, allowing stored cross-site scripting. Pu...

6.5CVSS7.2AI score0.00368EPSS
SaveExploits0References1
Circl
Circl
added 2025/01/24 4:31 p.m.3 views

GHSA-3W2C-JFR2-9PG9

creationtimestamp| type| source ---|---|--- 2025-01-24 16:31:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113884286733931596 2025-01-24 16:57:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113884389353887186 2025-01-24 17:05:11+00:00| published-proof-of-concept|...

6.1AI score
SaveExploits0References5
Circl
Circl
added 2025/01/24 4:04 p.m.13 views

CVE-2025-22606

creationtimestamp| type| source ---|---|--- 2025-01-24 16:04:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2926 2025-01-24 17:45:11+00:00| seen| https://t.me/cvedetector/16294...

9.3CVSS5.7AI score0.00287EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.8 views

WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Event post versions = 5.9.7...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.11 views

WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability

SQL Injection vulnerability discovered by AHMAD SOPYAN in WordPress Plugin RSVP and Event Management versions = 2.7.14...

7.6CVSS8.1AI score0.00585EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/24 11:15 a.m.24 views

CVE-2025-22714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.6...

7.1CVSS0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 10:52 a.m.4 views

CVE-2025-22714 WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.6...

7.1CVSS7.2AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 10:52 a.m.74 views

CVE-2025-22714

CVE-2025-22714 is a WordPress MDJM Event Management vulnerability: Reflected XSS in MDJM Event Management versions up to 1.7.5.5. Public docs list the affected product/version and state the issue is a Cross-Site Scripting in input handling during web page generation. The PT Security entry for thi...

7.1CVSS7.2AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 10:52 a.m.38 views

CVE-2025-22714 WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.6...

7.1CVSS0.0025EPSS
SaveExploits0References1
Rows per page
Query Builder