Lucene search
K

46 matches found

Cvelist
Cvelist
added 2026/05/27 2:55 p.m.31 views

CVE-2026-49052 WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ElementsKit Elementor addons Lite: from n/a through 3.9.6...

4.3CVSS0.00029EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/12 12:32 p.m.5 views

EUVD-2026-29451

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through = 3.4.6...

8.5CVSS5.8AI score0.00033EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.5 views

MotoPress Hotel Booking Lite 跨站脚本漏洞

MotoPress Hotel Booking Lite is a hotel booking software developed by MotoPress. Version 4.2.4 of MotoPress Hotel Booking Lite contains a cross-site scripting vulnerability. This vulnerability stems from a stored-cross-site scripting flaw in the accommodation type field, which may allow...

6.4CVSS5.6AI score0.00032EPSS
Exploits0References1
NVD
NVD
added 2026/04/15 11:16 a.m.1 views

CVE-2026-40764

Cross-Site Request Forgery CSRF vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Cross Site Request Forgery.This issue affects Contact Form by WPForms: from n/a through = 1.10.0.2...

8.1CVSS0.00018EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/20 11:25 p.m.27 views

CVE-2026-4083 Scoreboard for HTML5 Games Lite <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2. The shortcode function sfhgshortcode allows arbitrary HTML attributes to be added to the rendered element, with only a...

6.4CVSS0.00063EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.3 views

CVE-2026-25375

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.10...

4.3CVSS5.5AI score0.00053EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.5 views

CVE-2026-25375

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.10...

4.3CVSS0.00053EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.3 views

CVE-2025-69319

Improper Control of Generation of Code 'Code Injection' vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This issue affects Beaver Builder: from n/a through = 2.9.4.1...

7.5CVSS5.4AI score0.00092EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:5 p.m.3 views

CVE-2018-6953

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses...

9.8CVSS7.4AI score0.00436EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/06 9:38 p.m.3 views

CVE-2025-14614 Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer SFX on Windows, Altera Quartus Prime Lite Installer SFX on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1...

6.7CVSS6.6AI score0.00014EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/05 1:33 p.m.21 views

CVE-2024-23511 WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-Based XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.3.3...

6.5CVSS0.00081EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 12:31 p.m.25 views

CVE-2025-68512 WordPress Real 3D FlipBook plugin <= 4.11.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Stored XSS.This issue affects Real 3D FlipBook: from n/a through = 4.11.4...

6.5CVSS0.00029EPSS
Exploits0References1
NVD
NVD
added 2025/10/31 12:15 p.m.2 views

CVE-2025-64352

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through = 6.2.4...

2.7CVSS0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4043

Malware in sbrugna...

9.8CVSS9.5AI score0.00411EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-30582

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00264EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-32129

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00097EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/08/25 4:3 a.m.2 views

WordPress BetPress plugin <= 1.0.1 Lite - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin BetPress versions = 1.0.1 Lite...

7.1CVSS6AI score0.00025EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/07/03 12:0 a.m.1 views

ABB RMC-100 安全漏洞

The ABB RMC-100 is a remote modular controller from ABB Switzerland. Capable of managing automation, liquid and gas measurement, asset data centralization for large production and transmission facilities. A security vulnerability exists in the ABB RMC-100 that originates from a stack buffer...

8.2CVSS7.2AI score0.00368EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:20 a.m.2 views

CVE-2024-43932

Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through = 5.6.2...

8.8CVSS5.9AI score0.00472EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:12 a.m.7 views

CVE-2023-23882

Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.5...

4.3CVSS4.9AI score0.00054EPSS
Exploits0References1
Rows per page
Query Builder