Lucene search
+L

347 matches found

NVD
NVD
•added 2025/12/31 12:16 p.m.•19 views

CVE-2025-49358

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ruhul Amin Content Fetcher content-fetcher allows DOM-Based XSS.This issue affects Content Fetcher: from n/a through = 1.1...

6.5CVSS0.00188EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 12:01 p.m.•19 views

EUVD-2025-205924

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ruhul Amin Content Fetcher allows DOM-Based XSS.This issue affects Content Fetcher: from n/a through 1.1...

6.5CVSS5.9AI score0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/31 12:01 p.m.•58 views

CVE-2025-49358 WordPress Content Fetcher plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ruhul Amin Content Fetcher content-fetcher allows DOM-Based XSS.This issue affects Content Fetcher: from n/a through = 1.1...

6.5CVSS0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 12:01 p.m.•32 views

CVE-2025-49358

Content Fetcher (WordPress plugin) has CVE-2025-49358: an authenticated (Contributor+) Stored Cross-Site Scripting vulnerability affecting Content Fetcher

6.5CVSS5.9AI score0.00188EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 12:01 p.m.•11 views

CVE-2025-49358 WordPress Content Fetcher plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ruhul Amin Content Fetcher content-fetcher allows DOM-Based XSS.This issue affects Content Fetcher: from n/a through = 1.1...

6.5CVSS5.2AI score0.00188EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 12:00 p.m.•16 views

WordPress Content Fetcher plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jitlada in WordPress Plugin Content Fetcher versions = 1.1...

6.5CVSS5.8AI score0.00188EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•19 views

PT-2025-54305

Name of the Vulnerable Software and Affected Versions Ruhul Amin Content Fetcher versions through 1.1 Description The Ruhul Amin Content Fetcher software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-Site Scripting XSS issue. This...

6.5CVSS5.9AI score0.00188EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•22 views

WordPress plugin Content Fetcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•1 views

CVE-2025-49358: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ruhul Amin Content Fetcher content-fetcher allows DOM-Based XSS.This issue affects Content Fetcher: from n/a through = 1.1...

6.5CVSS5.8AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•10 views

CVE-2025-62872

Cross-Site Request Forgery CSRF vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through = 3.0.4...

4.3CVSS6.9AI score0.00131EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•8 views

EUVD-2025-202012

Cross-Site Request Forgery CSRF vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through = 3.0.4...

6.3AI score0.00131EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•13 views

CVE-2025-62872

Cross-Site Request Forgery CSRF vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through = 3.0.4...

4.3CVSS0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•37 views

CVE-2025-62872 WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through = 3.0.4...

4.3CVSS0.00131EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•3 views

CVE-2025-62872 WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through = 3.0.4...

4.3CVSS6.5AI score0.00131EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•37 views

CVE-2025-62872

CVE-2025-62872 concerns a CSRF vulnerability in the WordPress plugin Social Photo Fetcher (facebook-photo-fetcher). The issue affects Social Photo Fetcher versions from n/a through ≤ 3.0.4. The connected Wordfence report confirms CSRF in this plugin; exploitation details and fixes are not provide...

4.3CVSS6.5AI score0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 6:00 a.m.•62 views

CVE-2025-13031 WPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSS

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.13 does not sanitize and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks...

0.00224EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•14 views

PT-2025-50017

Cross-Site Request Forgery CSRF vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through = 3.0.4...

6.9AI score0.00131EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•12 views

WordPress plugin Social Photo Fetcher 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site reques...

4.3CVSS6.4AI score0.00131EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•1 views

CVE-2025-13031: Undefined Security Weakness

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.13 does not sanitize and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks...

5.9CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•11 views

WordPress plugin WPeMatico RSS Feed Fetcher 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.9CVSS5.7AI score0.00224EPSS
SaveExploits0References1
Rows per page
Query Builder