Lucene search
K

69 matches found

RedhatCVE
RedhatCVE
added 2026/02/15 7:10 a.m.14 views

CVE-2025-15483

The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hopname’ parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, ...

4.4CVSS5.7AI score0.00206EPSS
Exploits0References1
NVD
NVD
added 2026/02/14 7:16 a.m.8 views

CVE-2025-15483

The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hopname’ parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, ...

4.4CVSS0.00206EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/14 6:42 a.m.22 views

CVE-2025-15483 Link Hopper <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'hop_name' Parameter

The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hopname’ parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, ...

4.4CVSS0.00206EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/14 6:42 a.m.3 views

CVE-2025-15483

The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hopname’ parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, ...

4.4CVSS5.7AI score0.00206EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/14 6:42 a.m.3 views

CVE-2025-15483 Link Hopper <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'hop_name' Parameter

The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hopname’ parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, ...

4.4CVSS5.7AI score0.00206EPSS
Exploits0References2
CVE
CVE
added 2026/02/14 6:42 a.m.15 views

CVE-2025-15483

CVE-2025-15483 concerns the WordPress plugin Link Hopper (versions ≤ 2.5). It permits Stored XSS via the hop_name parameter. Exploitation requires authenticated admin access and is limited to multi-site installations or sites where unfiltered_html is disabled. The provided documents confirm the v...

4.4CVSS5.7AI score0.00206EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/14 12:0 a.m.5 views

WordPress plugin Link Hopper 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.4CVSS5.7AI score0.00206EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/14 12:0 a.m.6 views

PT-2026-8060

The Link Hopper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hop name’ parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access,...

4.4CVSS5.7AI score0.00206EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/02/13 11:39 p.m.4 views

WordPress Link Hopper plugin <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'hop_name' Parameter vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'hopname' Parameter vulnerability discovered by ZAST.AI - ZAST.AI in WordPress Plugin Link Hopper versions = 2.5...

4.4CVSS5.4AI score0.00206EPSS
Exploits0References1Affected Software1
Packet Storm News
Packet Storm News
added 2025/11/27 12:0 a.m.5 views

Exposing Vulnerabilities in RL: A Novel Stealthy Backdoor Attack through Reward Poisoning

Reinforcement learning RL has achieved remarkable success across diverse domains, enabling autonomous systems to learn and adapt to dynamic environments by optimizing a reward function. However, this reliance on reward signals creates a significant security vulnerability. In this paper, we study ...

6.9AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2016-9238

Malware in sbrugna...

7.8CVSS7.6AI score0.01251EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-15940

Malicious code in bioql PyPI...

6.8CVSS6.6AI score0.00497EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-15915

Malicious code in bioql PyPI...

8.1CVSS6.5AI score0.00209EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.1 views

Malicious code in @hopper-b2b/armario (npm)

The package @hopper-b2b/armario was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.1 views

Malicious code in @hopper-b2b/hopper (npm)

The package @hopper-b2b/hopper was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in @hopper-b2b/ui (npm)

The package @hopper-b2b/ui was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in @hopper-b2b/utilities (npm)

The package @hopper-b2b/utilities was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in @hopper-b2b/volaris (npm)

The package @hopper-b2b/volaris was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in @hopper-b2b/uber-iframe (npm)

The package @hopper-b2b/uber-iframe was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-8069 Malicious code in @hopper-b2b/hopper (npm)

The package @hopper-b2b/hopper was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Rows per page
Query Builder