Lucene search
+L

296 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:30 a.m.5 views

CVE-2023-3031

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS6.6AI score0.0079EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/08 9:14 p.m.6 views

USN-7427-1 dotnet8, dotnet9 vulnerability

James Newton-King discovered that .NET did not properly limit resource allocation when handling certain HTTP/3 requests. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS5.8AI score0.0154EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/03 10:14 a.m.17 views

CVE-2025-30926

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through = 24.12.58...

4.3CVSS7.2AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 6:15 a.m.30 views

CVE-2025-30926

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through = 24.12.58...

4.3CVSS0.00298EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/01 6:15 a.m.4 views

CVE-2025-30926

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through = 24.12.58...

4.3CVSS7.2AI score0.00298EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.8 views

CVE-2025-30926 WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through = 24.12.58...

4.3CVSS7.3AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.24 views

CVE-2025-30926 WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through = 24.12.58...

4.3CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 5:31 a.m.64 views

CVE-2025-30926

CVE-2025-30926 – Missing Authorization in King Addons for Elementor (King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor). Affected versions: up to 24.12.58. The entry is marked as patched; no exploit details are provided in the initial documents. Recommended...

4.3CVSS7.2AI score0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.7 views

WordPress plugin King Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS8.6AI score0.00298EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.23 views

PT-2025-14071 · Unknown · Qi Addons For Elementor

Name of the Vulnerable Software and Affected Versions: King Addons for Elementor versions through 24.12.58 Description: The issue is related to a Missing Authorization vulnerability. It is reported to affect devices worldwide, but the exact number of potentially affected devices is not specified...

4.3CVSS9.1AI score0.00298EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/03/27 11:20 a.m.6 views

WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin King Addons for Elementor versions = 24.12.58...

4.3CVSS6.9AI score0.00298EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/18 12:0 a.m.11 views

PT-2025-5622

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned. Description: A issue exists in chess game setups and user interfaces that can lead to the misidentification of the King and Queen pieces. This issue arises primarily from ambiguous...

7.2CVSS6.2AI score0.01096EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/12/12 12:0 a.m.4 views

Denial of Service Vulnerability in Configuration King of Beijing Asian Control Technology Development Co.

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. Ltd. A denial of service vulnerability exists in Configuration King, which can be exploited by attackers to cause a denial of service...

6.9AI score
SaveExploits0
OSV
OSV
added 2024/10/09 7:4 a.m.5 views

MAL-2024-9147 Malicious code in get-new-script-king-of-fighters-xv-h-a-c-k-trainer-c-h-e-a-t-anqens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3063a788d7385023a8e21b7f2f49005416b23b277370602a9dae3516587682f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/09/26 10:15 a.m.6 views

CVE-2024-9125

The kingIE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject...

5.4CVSS5.9AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.6 views

PT-2024-39447 · WordPress · King Ie

Name of the Vulnerable Software and Affected Versions: king IE plugin for WordPress version 1.0 and earlier Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

6.4CVSS6.2AI score0.00259EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/09/26 12:0 a.m.6 views

WordPress plugin king_IE 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.4CVSS5.8AI score0.00259EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2024/06/23 7:39 p.m.10 views

king-top.com Cross Site Scripting vulnerability OBB-3938048

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/05/29 4:0 a.m.553 views

Exploit for Open Redirect in King-Theme Kingcomposer

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

6.1CVSS6.3AI score0.0428EPSS
SaveExploits4
Vulnrichment
Vulnrichment
added 2024/05/17 8:17 a.m.16 views

CVE-2024-33550 WordPress WP Masquerade plugin <= 1.1.0 - Authenticated Account Takeover vulnerability

Improper Privilege Management vulnerability in JR King/Eran Schoellhorn WP Masquerade allows Privilege Escalation.This issue affects WP Masquerade: from n/a through 1.1.0...

8.8CVSS6.9AI score0.00476EPSS
SaveExploits0References1
Rows per page
Query Builder