Lucene search
+L

761 matches found

EUVD
EUVD
•added 2026/08/13 1:37 p.m.•14 views

EUVD-2026-57909

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/13 1:37 p.m.•50 views

CVE-2026-73340 WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/13 1:37 p.m.•10 views

CVE-2026-73340 WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•3 views

CVE-2026-73340: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•16 views

PT-2026-71599

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/08/12 10:54 a.m.•11 views

WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by luc in WordPress Plugin Featured Image from URL versions = 5.3.3...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/08/06 3:17 p.m.•22 views

CVE-2026-66685

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

5.3CVSS0.0033EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/06 2:27 p.m.•18 views

CVE-2026-66685

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

5.3CVSS5.4AI score0.0033EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/06 2:27 p.m.•76 views

CVE-2026-66685

The connected documents identify a vulnerability in the WordPress Featured Video Plus plugin, affected versions

5.3CVSS5.4AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/06 2:27 p.m.•39 views

CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

5.3CVSS0.0033EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/06 2:27 p.m.•20 views

EUVD-2026-53896

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

5.3CVSS5.4AI score0.0033EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/06 2:27 p.m.•13 views

CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

5.3CVSS5.4AI score0.0033EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/06 10:50 a.m.•17 views

WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...

5.3CVSS5.5AI score0.0033EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•1 views

CVE-2026-66685: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

5.3CVSS5.7AI score0.0033EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/04 6:00 a.m.•14 views

CVE-2026-16069 Brizy - Page Builder < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

5.8AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/04 6:00 a.m.•68 views

CVE-2026-16069

The Brizy WordPress plugin, in versions prior to 2.8.19 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitize or escape featured-image focal-point coordinates submitted via an AJAX action before they are stored and subsequently echoed into HTML attribute...

6.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/04 6:00 a.m.•15 views

CVE-2026-16069

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

5.8AI score0.00431EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•33 views

PT-2026-67657

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

5.8AI score0.00431EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•1 views

CVE-2026-16069: Improper Neutralization of Input During Web Page Generation

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

6.8CVSS6.1AI score0.00431EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/07/31 6:53 p.m.•15 views

WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Auto Featured Image Auto Post Thumbnail versions = 5.0.4...

4.9CVSS5.4AI score0.00188EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder