Lucene search
+L

11515 matches found

NVD
NVD
•added 2026/10/07 5:17 p.m.•15 views

CVE-2026-94670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

7.1CVSS0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/07 4:57 p.m.•43 views

CVE-2026-94670 WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

7.1CVSS0.00146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/07 4:57 p.m.•11 views

CVE-2026-94670 WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 4:57 p.m.•30 views

CVE-2026-94670

The Everest Forms WordPress plugin (versions

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 4:57 p.m.•13 views

EUVD-2026-94487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•12 views

PT-2026-107626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•8 views

CVE-2026-94670: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 9:17 a.m.•10 views

CVE-2026-94675

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

7.1CVSS0.00191EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 9:17 a.m.•6 views

CVE-2026-32574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104...

7.1CVSS0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 8:35 a.m.•10 views

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 8:35 a.m.•12 views

EUVD-2026-93065

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 8:35 a.m.•30 views

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

7.1CVSS0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 8:35 a.m.•12 views

CVE-2026-94675

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 8:34 a.m.•8 views

CVE-2026-32574

The WordPress Smart Forms plugin versions

7.1CVSS5.7AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 8:34 a.m.•31 views

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104...

7.1CVSS0.00237EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 8:34 a.m.•6 views

EUVD-2026-93236

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 8:34 a.m.•4 views

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104...

7.1CVSS5.7AI score0.00237EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/06 1:56 a.m.•16 views

wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application Esta es una aplicación vulnerable para probar el exploit del control de acceso roto Jetpack 13.9.1 CVE-2024-9926. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Ejecútela bajo su propio riesgo! Se...

4.3CVSS6.3AI score0.01283EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•6 views

PT-2026-106401

Name of the Vulnerable Software and Affected Versions Smart Forms versions prior to 2.6.105 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...

7.1CVSS6AI score0.00237EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•4 views

CVE-2026-32574: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References2
Rows per page
Query Builder