Lucene search
+L

219 matches found

NVD
NVD
added 2025/05/07 3:16 p.m.24 views

CVE-2025-47630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Stored XSS.This issue affects Ajax Load More: from n/a through = 7.3.1.2...

6.5CVSS0.00246EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/07 3:16 p.m.9 views

CVE-2025-47630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More allows Stored XSS. This issue affects Ajax Load More: from n/a through 7.3.1...

5.4CVSS5.8AI score0.00246EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 3:07 p.m.14 views

WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Ajax Load More versions = 7.3.1.2...

6.5CVSS7AI score0.00246EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/07 2:20 p.m.11 views

CVE-2025-47630 WordPress Ajax Load More <= 7.3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More allows Stored XSS. This issue affects Ajax Load More: from n/a through 7.3.1...

6.5CVSS6.4AI score0.00246EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 2:20 p.m.31 views

CVE-2025-47630 WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Stored XSS.This issue affects Ajax Load More: from n/a through = 7.3.1.2...

6.5CVSS0.00246EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:20 p.m.73 views

CVE-2025-47630

CVE-2025-47630 : Stored XSS in the WordPress Ajax Load More plugin caused by improper input neutralization during page generation. Affected: versions up to 7.3.1; fix released in 7.3.1.2 (PatchStack), with corroboration from NVD/CVE listings. Exploitation status not specified in the provided docu...

6.5CVSS7.2AI score0.00246EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.10 views

WordPress plugin Ajax Load More 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Ajax Load More plugin, which stems from the application's lack of effective filtering and escaping of user-supplied...

6.5CVSS6.2AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.13 views

PT-2025-20195 · Unknown · Ajax Load More

Name of the Vulnerable Software and Affected Versions: Ajax Load More versions through 7.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...

6.5CVSS6.7AI score0.00246EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/15 5:15 a.m.11 views

CVE-2025-1771

The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotelaloneloadmorepost' function 'style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

9.8CVSS7.8AI score0.00659EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 6:06 a.m.19 views

CVE-2024-49662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:25 p.m.13 views

CVE-2024-53780

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

7.1CVSS7.2AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/02 2:15 p.m.18 views

CVE-2024-53780

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

7.1CVSS0.00158EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 1:48 p.m.63 views

CVE-2024-53780

CVE-2024-53780 describes a Cross-Site Request Forgery that enables Stored XSS in the WordPress Load More Posts plugin, affecting versions up to 1.4.0 (per the CVE entry). The available connected sources corroborate the CSRF-to-Stored-XSS issue and indicate a later fix in version 1.5.0 or newer (P...

7.1CVSS7.2AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 1:48 p.m.29 views

CVE-2024-53780 WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

7.1CVSS0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 1:48 p.m.15 views

CVE-2024-53780 WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...

7.1CVSS8.6AI score0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.11 views

PT-2024-35893 · Unknown · Load More Posts

Name of the Vulnerable Software and Affected Versions: Load More Posts versions 1.4.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS6.8AI score0.00158EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/11/28 3:07 p.m.10 views

WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Load More Posts versions = 1.5.0...

7.1CVSS6.2AI score0.00158EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/10/29 12:15 p.m.17 views

CVE-2024-49662

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webgensis Simple Load More allows Reflected XSS.This issue affects Simple Load More: from n/a through 1.0...

6.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/29 12:15 p.m.37 views

CVE-2024-49662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

7.1CVSS0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 11:42 a.m.14 views

CVE-2024-49662 WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder