Lucene search
+L

945 matches found

CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•18 views

WordPress plugin Hide Shipping Method For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS8.7AI score0.00343EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/31 2:56 p.m.•17 views

WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Hide Shipping Method For WooCommerce versions = 1.5.1...

4.3CVSS7AI score0.00343EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/01/31 9:15 a.m.•9 views

CVE-2025-22341

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in parswp Hide Login+ hide-login allows Reflected XSS.This issue affects Hide Login+: from n/a through = 3.5.1...

7.1CVSS0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/31 8:23 a.m.•32 views

CVE-2025-22341 WordPress Hide Login+ plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in parswp Hide Login+ hide-login allows Reflected XSS.This issue affects Hide Login+: from n/a through = 3.5.1...

7.1CVSS0.00281EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/31 8:23 a.m.•70 views

CVE-2025-22341

CVE-2025-22341 is a Reflected XSS vulnerability in the WordPress plugin Hide Login+ (Mohammad Hossein Aghanabi) affecting versions up to and including 3.5.1. The CVSSv3.1 base score is 7.1 (HIGH) with attacker network access, requiring user interaction. Remediation is to upgrade to a version late...

7.1CVSS7.2AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/31 8:23 a.m.•12 views

CVE-2025-22341 WordPress Hide Login+ plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohammad Hossein Aghanabi Hide Login+ allows Reflected XSS. This issue affects Hide Login+: from n/a through 3.5.1...

7.1CVSS7AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/31 12:00 a.m.•19 views

PT-2025-4455 · Unknown · Hide Login+

Name of the Vulnerable Software and Affected Versions: Hide Login+ versions 3.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For Hide Login+ versions 3.5...

7.1CVSS9.3AI score0.00281EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•16 views

WordPress plugin Hide Login+ 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

7.1CVSS7.7AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•4 views

CVE-2025-22341: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in parswp Hide Login+ hide-login allows Reflected XSS.This issue affects Hide Login+: from n/a through = 3.5.1...

7.1CVSS5.8AI score0.00281EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/24 6:15 p.m.•44 views

CVE-2025-24687

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lars Wallenborn Show/Hide Shortcode showhide-shortcode allows Stored XSS.This issue affects Show/Hide Shortcode: from n/a through = 1.0.0...

6.5CVSS0.00346EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/24 5:24 p.m.•43 views

CVE-2025-24687 WordPress Show/Hide Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lars Wallenborn Show/Hide Shortcode showhide-shortcode allows Stored XSS.This issue affects Show/Hide Shortcode: from n/a through = 1.0.0...

6.5CVSS0.00346EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•13 views

WordPress Show/Hide Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Show/Hide Shortcode versions = 1.0.0...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•16 views

WordPress plugin Show/Hide Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.9AI score0.00346EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•4 views

CVE-2025-24687: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lars Wallenborn Show/Hide Shortcode showhide-shortcode allows Stored XSS.This issue affects Show/Hide Shortcode: from n/a through = 1.0.0...

6.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/21 11:15 p.m.•14 views

CVE-2024-49733

In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.0008EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•16 views

PT-2025-2855 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing permission check in the onCreate method of NotificationAccessConfirmationActivity.java. This could allow an app with notification access to be hidden in...

7.8CVSS6.7AI score0.00073EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/01/18 12:00 a.m.•28 views

PT-2025-3932 · WordPress · The Buzz Club – Night Club

Name of the Vulnerable Software and Affected Versions: The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme versions up to, and including, 2.0.4 Description: The issue allows unauthorized modification of data, potentially leading to a denial of service. This is due to a missing...

4.3CVSS9.4AI score0.0024EPSS
SaveExploits0References6
NVD
NVD
•added 2025/01/07 5:15 p.m.•45 views

CVE-2024-56272

Missing Authorization vulnerability in ThemeSupport Hide Category by User Role for WooCommerce hide-category-by-user-role-for-woocommerce.This issue affects Hide Category by User Role for WooCommerce: from n/a through = 2.1.1...

4.3CVSS0.00286EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•16 views

WordPress plugin Hide Category by User Role for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Hi...

4.3CVSS8.1AI score0.00286EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•19 views

PT-2025-3235 · Woocommerce · Hide Category By User Role For Woocommerce

Name of the Vulnerable Software and Affected Versions: Hide Category by User Role for WooCommerce versions n/a through 2.1.1 Description: The issue is related to a Missing Authorization vulnerability in the ThemeSupport Hide Category by User Role for WooCommerce plugin. This vulnerability affects...

4.3CVSS9.3AI score0.00286EPSS
SaveExploits0References4
Rows per page
Query Builder