Lucene search
+L

57 matches found

Kitploit
Kitploit
•added 2026/10/05 6:07 p.m.•16 views

van-gonography

Hide any type of files inside a image of your choice Table of Contents Features How it works Installation Usage License Contributing File to hide| Cover image| Cover with file hidden ---|---|--- | | This is the file that we want to hide inside the image| This is the image that we want to hide the...

6.3AI score
SaveExploits0References2
Fedora
Fedora
•added 2026/04/13 9:07 p.m.•18 views

[SECURITY] Fedora 44 Update: nomacs-3.22.0-5.fc44

nomacs is image viewer based on Qt5 library. nomacs is small, fast and able to handle the most common image formats. Additionally it is possible to synchronize multiple viewers running on the same computer or via LAN is possible. It allows to compare images and spot the differences e.g. schemes o...

9.8CVSS5.9AI score0.0098EPSS
SaveExploits3
Patchstack
Patchstack
•added 2025/12/15 5:48 p.m.•22 views

WordPress JetWidgets For Elementor plugin <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets vulnerability discovered by zer0gh0st in WordPress Plugin JetWidgets For Elementor versions = 1.0.20...

6.4CVSS5.5AI score0.00223EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/14 8:45 a.m.•24 views

CVE-2025-8195

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison and Subscribe widgets in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5AI score0.00223EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/14 8:45 a.m.•25 views

CVE-2025-8687

The Enter Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown and Image Comparison widgets in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5AI score0.00216EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/13 6:30 p.m.•15 views

EUVD-2025-203247

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison and Subscribe widgets in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS4.7AI score0.00223EPSS
SaveExploits0References6
CVE
CVE
•added 2025/12/13 8:21 a.m.•32 views

CVE-2025-8687

CVE-2025-8687 refers to the WordPress plugin Enter Addons (formerly Elementor Addon Elements) vulnerability. The issue is a Stored Cross-Site Scripting (XSS) in the Countdown and Image Comparison widgets affecting all versions up to and including 2.2.7, caused by insufficient input sanitization a...

6.4CVSS6.1AI score0.00216EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/13 8:21 a.m.•8 views

CVE-2025-8195 JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison and Subscribe widgets in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS6.1AI score0.00223EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/12/13 8:21 a.m.•47 views

CVE-2025-8195 JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison and Subscribe widgets in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS0.00223EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/13 8:21 a.m.•8 views

CVE-2025-8687 Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets

The Enter Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown and Image Comparison widgets in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6.1AI score0.00216EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/13 8:21 a.m.•48 views

CVE-2025-8195

CVE-2025-8195 affects the WordPress plugin JetWidgets For Elementor. It is a stored cross-site scripting (XSS) vulnerability in the Image Comparison and Subscribe widgets, exploitable in all versions up to 1.0.20. The root cause is insufficient input sanitization and output escaping on user-suppl...

6.4CVSS6.1AI score0.00223EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2025/12/13 3:19 a.m.•16 views

WordPress Enter Addons plugin <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown and Image Comparison Widgets vulnerability discovered by zer0gh0st in WordPress Plugin Enter Addons versions = 2.2.7...

6.4CVSS5.5AI score0.00216EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/13 12:00 a.m.•16 views

PT-2025-51105

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison and Subscribe widgets in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5AI score0.00223EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•15 views

WordPress plugin JetWidgets For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

6.4CVSS6AI score0.00223EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•20 views

WordPress plugin Enter Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6AI score0.00216EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•1 views

CVE-2025-8687: Improper Neutralization of Input During Web Page Generation

The Enter Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown and Image Comparison widgets in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6AI score0.00216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•0 views

CVE-2025-8195: Improper Neutralization of Input During Web Page Generation

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison and Subscribe widgets in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS6AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/13 12:00 a.m.•19 views

PT-2025-51107

The Enter Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown and Image Comparison widgets in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5AI score0.00216EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/11/04 12:36 p.m.•18 views

WordPress Image Comparison Addon for Elementor plugin <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Upload vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary plugin Upload vulnerability discovered by theviper17y in WordPress Plugin Image Comparison Addon for Elementor versions = 1.0.2.2...

8.8CVSS6.7AI score0.00655EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•35 views

WordPress plugin多款产品 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

8.8CVSS7.4AI score0.00655EPSS
SaveExploits0References5
Rows per page
Query Builder