Lucene search
+L

2694 matches found

Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.8 views

PT-2025-39941

Name of the Vulnerable Software and Affected Versions GutenBee – Gutenberg Blocks plugin for WordPress versions prior to 2.18.1 Description The GutenBee – Gutenberg Blocks plugin for WordPress is susceptible to Stored Cross-Site Scripting through parameters in the CountUp and Google Maps Blocks...

6.4CVSS5.3AI score0.00226EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.13 views

PT-2025-39942

Name of the Vulnerable Software and Affected Versions Mihdan: Elementor Yandex Maps plugin for WordPress versions through 1.6.11 Description The Mihdan: Elementor Yandex Maps plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s block attributes. This is due to...

6.4CVSS5.4AI score0.00224EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.13 views

PT-2025-39944

Name of the Vulnerable Software and Affected Versions Nexa Blocks plugin for WordPress versions prior to 1.1.1 Description The Nexa Blocks plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Google Maps widget. This is due to inadequate input sanitization and output...

6.4CVSS5.4AI score0.00224EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/27 3:47 a.m.19 views

CVE-2025-9044

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS5.1AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/26 4:16 a.m.20 views

CVE-2025-9044

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS0.00239EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/09/26 3:25 a.m.15 views

CVE-2025-9044 Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS0.00239EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/09/26 3:25 a.m.3 views

CVE-2025-9044 Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level permissions and...

6.4CVSS4.8AI score0.00239EPSS
SaveExploits0References6
CVE
CVE
added 2025/09/26 3:25 a.m.34 views

CVE-2025-9044

CVE-2025-9044 : Mapster WP Maps (WordPress plugin) is affected by a Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. Exploitation requires authentication (contributor level or higher) and can allow injection of web scripts on pages viewed by users. Affected ...

6.4CVSS4.8AI score0.00239EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.11 views

WordPress plugin Mapster WP Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS5.8AI score0.00239EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.8 views

PT-2025-39489

Name of the Vulnerable Software and Affected Versions Mapster WP Maps plugin for WordPress versions prior to 1.21.0 Description The Mapster WP Maps plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows authenticate...

6.4CVSS5.3AI score0.00239EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.5 views

CVE-2025-57952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.5...

5.9CVSS5.9AI score0.00305EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/09/22 11:42 p.m.8 views

SUSE CVE-2022-50296

In the Linux kernel, the following vulnerability has been resolved: UM: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS is selected, cpumaxbitswarn generates a runtime warning similar as below while we show /proc/cpuinfo. Fix this by using...

5.5CVSS6.5AI score0.00149EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/22 7:15 p.m.4 views

CVE-2025-57952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.5...

5.9CVSS0.00305EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/09/22 7:9 p.m.7 views

WordPress Maps for WP Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Maps for WP versions = 1.2.5...

5.9CVSS6AI score0.00305EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/22 6:24 p.m.1 views

CVE-2025-57952 WordPress Maps for WP Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP allows Stored XSS. This issue affects Maps for WP: from n/a through 1.2.5...

5.9CVSS5.6AI score0.00305EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:24 p.m.9 views

CVE-2025-57952

CVE-2025-57952 is a Stored XSS in Maps for WP (WordPress plugin) affecting Maps for WP versions up to 1.2.5. The description notes improper input neutralization during web page generation. Connected documents indicate the vulnerability exists for Maps for WP

5.9CVSS5.9AI score0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:24 p.m.18 views

CVE-2025-57952 WordPress Maps for WP Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This issue affects Maps for WP: from n/a through = 1.2.5...

5.9CVSS0.00305EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.5 views

WordPress plugin Maps for WP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

5.9CVSS5.8AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.7 views

PT-2025-38802

Name of the Vulnerable Software and Affected Versions icopydoc Maps for WP versions through 1.2.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows an attacker to inject...

5.9CVSS6.1AI score0.00305EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/19 12:0 a.m.5 views

PT-2025-38654

CVE-2025-59678 - Google Maps Unvalidated Redirect CVE ID : CVE-2025-59678 Published : Sept. 19, 2025, 3:15 a.m. | 1 hour, 50 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.4AI score
SaveExploits0References1
Rows per page
Query Builder