Lucene search
+L

31 matches found

Patchstack
Patchstack
•added 2026/09/18 12:00 a.m.•10 views

WordPress Core <= 7.1 - Admin+ Stored XSS in Custom Header Images vulnerability

Admin+ Stored XSS in Custom Header Images vulnerability discovered by Jeremy Felt in WordPress core versions = 7.1...

5.8AI score
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:46 a.m.•15 views

CVE-2025-23437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nordtramper ntp-header-images header-images-rotator allows Reflected XSS.This issue affects ntp-header-images: from n/a through = 1.2...

7.1CVSS5.8AI score0.00299EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-5760

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00299EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-50838

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/03 2:15 p.m.•14 views

CVE-2025-23437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nordtramper ntp-header-images header-images-rotator allows Reflected XSS.This issue affects ntp-header-images: from n/a through = 1.2...

7.1CVSS0.00299EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•66 views

CVE-2025-23437

CVE-2025-23437 describes a reflected cross-site scripting vulnerability in the WordPress plugin ntp-header-images (NotFound) versions up to and including 1.2 . The issue stems from improper input neutralization during web page generation, enabling reflected XSS when processing input. Public docum...

7.1CVSS5.9AI score0.00299EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•9 views

CVE-2025-23437 WordPress ntp-header-images plugin <=1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound ntp-header-images allows Reflected XSS. This issue affects ntp-header-images: from n/a through 1.2...

7.1CVSS7.1AI score0.00299EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•30 views

CVE-2025-23437 WordPress ntp-header-images plugin <=1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nordtramper ntp-header-images header-images-rotator allows Reflected XSS.This issue affects ntp-header-images: from n/a through = 1.2...

7.1CVSS0.00299EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•4 views

CVE-2025-23437: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nordtramper ntp-header-images header-images-rotator allows Reflected XSS.This issue affects ntp-header-images: from n/a through = 1.2...

7.1CVSS5.8AI score0.00299EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•5 views

PT-2025-9329

Name of the Vulnerable Software and Affected Versions NotFound ntp-header-images versions 1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versio...

7.1CVSS0.00299EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•17 views

WordPress plugin NotFound ntp-header-images 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS5.9AI score0.00299EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/01/16 6:41 p.m.•19 views

WordPress ntp-header-images plugin <=1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin ntp-header-images versions = 1.2...

7.1CVSS6.1AI score0.00299EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2023/11/13 1:15 a.m.•34 views

CVE-2023-46636

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

8.8CVSS0.00254EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/13 1:15 a.m.•38 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

6.8CVSS7.2AI score0.00254EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/11/13 12:20 a.m.•36 views

CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

5.4CVSS7.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/11/13 12:20 a.m.•22 views

CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

5.4CVSS7AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/13 12:20 a.m.•126 views

CVE-2023-46636

CVE-2023-46636 describes a CSRF vulnerability in the WordPress plugin Custom Header Images (versions

8.8CVSS7AI score0.00254EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/13 12:20 a.m.•50 views

CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

5.4CVSS9.1AI score0.00254EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/13 12:00 a.m.•17 views

WordPress Plugin Custom Header Images Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS6.5AI score0.00254EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/13 12:00 a.m.•7 views

CVE-2023-46636: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

8.8CVSS7.9AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder