Lucene search
+L

274 matches found

Packet Storm
Packet Storm
added 2025/12/24 12:00 a.m.266 views

📄 Litespeed Cache 6.4.0.1 Privilege Escalation

WordPress Litespeed Cache plugin version 6.4.0.1 allows attackers to brute-force authentication hashes and create administrative users without any initial credentials...

9.8CVSS7.3AI score0.68266EPSS
SaveExploits8
RedhatCVE
RedhatCVE
added 2025/10/30 9:51 a.m.12 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.6AI score0.00391EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/29 10:15 a.m.13 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.00391EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/29 9:27 a.m.7 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.3AI score0.00391EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/29 9:27 a.m.9 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS7.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/29 9:27 a.m.28 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.00391EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/29 9:27 a.m.46 views

CVE-2025-12450

CVE-2025-12450 affects the WordPress LiteSpeed Cache plugin. The vulnerability is a Reflected Cross-Site Scripting via URLs in all versions up to 7.5.0.1, caused by insufficient input sanitization and output escaping. It could allow unauthenticated attackers to inject script into pages that execu...

6.1CVSS5.3AI score0.00391EPSS
SaveIn wildExploits0References2
Patchstack
Patchstack
added 2025/10/29 6:15 a.m.16 views

WordPress LiteSpeed Cache plugin <= 7.5.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Nicholas Giemsa in WordPress Plugin LiteSpeed Cache versions = 7.5.0.1...

6.1CVSS7.9AI score0.00391EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2025/10/29 12:00 a.m.14 views

VulnCheck KEV: CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.9AI score0.00391EPSS
SaveIn wildExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.16 views

PT-2025-44269

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache plugin for WordPress versions up to and including 7.5.0.1 Description The LiteSpeed Cache plugin for WordPress is susceptible to Reflected Cross-Site Scripting through URLs. This is caused by inadequate input sanitization and...

6.1CVSS7.5AI score0.00391EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2025/10/29 12:00 a.m.13 views

WordPress plugin LiteSpeed Cache 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

6.1CVSS8.2AI score0.00391EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2020-21552

Malware in sbrugna...

6.1CVSS6.3AI score0.00941EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2021-11875

Malware in sbrugna...

4.8CVSS4.9AI score0.00654EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-49769

Malicious code in bioql PyPI...

5.5CVSS6.5AI score0.00279EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.19 views

EUVD-2024-44947

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00899EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.17 views

EUVD-2025-27442

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2024-42410

Malicious code in bioql PyPI...

7.1CVSS6.7AI score0.01408EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2023-54236

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.16767EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2024-31838

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00178EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.19 views

EUVD-2023-49322

Malicious code in bioql PyPI...

8.2CVSS9AI score0.00413EPSS
SaveExploits0References1
Rows per page
Query Builder