Lucene search
+L

604 matches found

CNNVD
CNNVD
added 2025/04/17 12:0 a.m.7 views

WordPress plugin WP Featured Screenshot 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00293EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 4:42 p.m.11 views

CVE-2025-31820

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.4...

4.3CVSS7.2AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/03 2:9 p.m.9 views

BIT-JOOMLA-2020-10243

An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype...

9.8CVSS9.9AI score0.02037EPSS
SaveExploits0References2
NVD
NVD
added 2025/04/01 3:16 p.m.6 views

CVE-2025-31820

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.4...

4.3CVSS0.00308EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.48 views

CVE-2025-31820

CVE-2025-31820 : Missing Authorization vulnerability in the WordPress plugin Automatic Featured Images from Videos. Affected range is from n/a to 1.2.4, caused by misconfigured access control. The provided documents explicitly identify the flaw type and affected versions, but do not include remed...

4.3CVSS7.2AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.6 views

WordPress plugin Automatic Featured Images from Videos 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS5.8AI score0.00308EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/26 2:21 p.m.8 views

CVE-2025-30569

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jahertor WP Featured Entries wp-featured-entries allows SQL Injection.This issue affects WP Featured Entries: from n/a through = 1.0...

8.5CVSS7.3AI score0.00388EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/24 2:15 p.m.6 views

CVE-2025-30569

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jahertor WP Featured Entries wp-featured-entries allows SQL Injection.This issue affects WP Featured Entries: from n/a through = 1.0...

8.5CVSS0.00388EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/24 1:47 p.m.4 views

CVE-2025-30569 WordPress WP Featured Entries plugin <= - 1.0 SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jahertor WP Featured Entries wp-featured-entries allows SQL Injection.This issue affects WP Featured Entries: from n/a through = 1.0...

8.5CVSS7.4AI score0.00388EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/24 1:47 p.m.26 views

CVE-2025-30569 WordPress WP Featured Entries plugin <= - 1.0 SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jahertor WP Featured Entries wp-featured-entries allows SQL Injection.This issue affects WP Featured Entries: from n/a through = 1.0...

8.5CVSS0.00388EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/24 1:47 p.m.62 views

CVE-2025-30569

CVE-2025-30569 is a documented SQL Injection affecting the WordPress plugin WP Featured Entries . The vulnerability is described as an authenticated issue (Contributor+ level) that allows SQL injection, impacting versions up to and including 1.0. Patch status in the connected disclosure is listed...

8.5CVSS7.3AI score0.00388EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:31 p.m.5 views

WordPress WP Featured Entries plugin <= - 1.0 SQL Injection Vulnerability

1.0 SQL Injection Vulnerability discovered by timomangcut in WordPress Plugin WP Featured Entries versions = 1.0...

8.5CVSS8AI score0.00388EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/24 12:0 a.m.5 views

WordPress plugin WP Featured Entries SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS9.1AI score0.00388EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/14 3:51 p.m.13 views

CVE-2025-28918

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in A. Jones Featured Image Thumbnail Grid thumbnail-grid allows Stored XSS.This issue affects Featured Image Thumbnail Grid: from n/a through = 6.8...

6.5CVSS7.2AI score0.00251EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/13 10:2 p.m.8 views

CVE-2025-28905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through = 1.7...

7.1CVSS7.2AI score0.00268EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/11 9:46 p.m.6 views

WordPress Featured Image Thumbnail Grid plugin <= 6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Featured Image Thumbnail Grid versions = 6.8...

6.5CVSS7.6AI score0.00251EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/03/11 9:45 p.m.7 views

WordPress Featured Posts Grid plugin <= 1.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Featured Posts Grid versions = 1.7...

7.1CVSS8.2AI score0.00268EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/11 9:15 p.m.9 views

CVE-2025-28918

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in A. Jones Featured Image Thumbnail Grid thumbnail-grid allows Stored XSS.This issue affects Featured Image Thumbnail Grid: from n/a through = 6.8...

6.5CVSS0.00251EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/11 9:15 p.m.6 views

CVE-2025-28905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through = 1.7...

7.1CVSS0.00268EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/11 9:1 p.m.54 views

CVE-2025-28918

CVE-2025-28918 : Stored XSS in WordPress plugin Featured Image Thumbnail Grid up to version 6.6.1 . Root cause: improper neutralization of input during web page generation in the plugin, enabling stored cross-site scripting. Affected product/component: WordPress Plugin – Featured Image Thumbnail ...

6.5CVSS7.2AI score0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder