Lucene search
+L

16 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2021-11980

Malware in sbrugna...

7.2CVSS7AI score0.01301EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2024-51584

Malicious code in bioql PyPI...

6.1CVSS9AI score0.00291EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/22 7:15 a.m.•31 views

CVE-2024-13406

The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feedid' parameter in all versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

6.1CVSS0.00291EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•2 views

CVE-2024-13406: Improper Neutralization of Input During Web Page Generation

The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feedid' parameter in all versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

6.1CVSS6AI score0.00291EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•17 views

WordPress plugin XML for Google Merchant Center 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS8AI score0.00291EPSS
SaveExploits0References3
OSV
OSV
•added 2024/10/10 2:15 a.m.•15 views

CVE-2024-9057

The Curator.io: Show all your social media posts in a beautiful feed. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘feedid’ attribute in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS5.9AI score0.00321EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/10 2:06 a.m.•13 views

CVE-2024-9057 Curator.io: Show all your social media posts in a beautiful feed. <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via feed_id Attribute

The Curator.io: Show all your social media posts in a beautiful feed. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘feedid’ attribute in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6.1AI score0.00321EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/10 12:00 a.m.•1 views

CVE-2024-9057: Improper Neutralization of Input During Web Page Generation

The Curator.io: Show all your social media posts in a beautiful feed. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘feedid’ attribute in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6AI score0.00321EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/13 12:00 a.m.•13 views

WordPress Plugin YML for Yandex Market Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.1CVSS6.2AI score0.00466EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•3 views

CVE-2024-1365: Improper Neutralization of Input During Web Page Generation

The YML for Yandex Market plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the feedid parameter in all versions up to, and including, 4.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6AI score0.00466EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
•added 2024/02/23 12:00 a.m.•19 views

YML for Yandex Market < 4.2.4 - Reflected Cross-Site Scripting

Description The YML for Yandex Market plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the feedid parameter in all versions up to, and including, 4.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

6.1CVSS6.1AI score0.00466EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/28 12:00 a.m.•1 views

CVE-2021-25068: Improper Neutralization of Special Elements used in an SQL Command

The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feedid' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard...

7.2CVSS7.2AI score0.01301EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/28 12:00 a.m.•13 views

WordPress plugin SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Sync WooCommerce Product feed to Google Shopping plugin has a SQL injection vulnerability The vulnerability stems from the...

7.2CVSS6.1AI score0.01301EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/21 12:00 a.m.•4 views

CVE-2008-4623: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DS-Syndicate comds-syndicate component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feedid parameter to index2.php...

7.5CVSS6.4AI score0.01151EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/10/20 12:00 a.m.•26 views

Joomla! Component ds-syndicate - feed_id SQL Injection

Joomla! Component ds-syndicate - feedid SQL Injection Joomla comds-syndicate Sql-injetion vulnerability Author : boom3rang HomePage: www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. Kosova Hackers Group ! ComponentName: ds-syndicate ! ScriptName: Joomla ! GoogleDork:...

0.2AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/10/20 12:00 a.m.•29 views

Joomla Component ds-syndicate (feed_id) SQL Injection Vulnerability

No description provided by source. Joomla comds-syndicate Sql-injetion vulnerability Author : boom3rang HomePage: www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. Kosova Hackers Group ! ComponentName: ds-syndicate ! ScriptName: Joomla ! GoogleDork: inurl:"comds-syndicate" Exp:...

7.1AI score
SaveExploits0
Rows per page
Query Builder