Lucene search
+L

9076 matches found

CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•21 views

WordPress plugin Quiz And Survey Master SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.5CVSS6.1AI score0.0028EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•34 views

PT-2026-21010

Name of the Vulnerable Software and Affected Versions Master Addons For Elementor plugin for WordPress versions 2.1.1 and earlier Description The software is susceptible to a Stored Cross-Site Scripting issue because of inadequate input sanitization and output escaping. This allows authenticated...

6.4CVSS5.3AI score0.00161EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•22 views

PT-2026-21030

Name of the Vulnerable Software and Affected Versions Master Addons for Elementor versions through 2.0.9.9.4 Description A flaw exists in Master Addons for Elementor that allows for Stored Cross-site Scripting XSS. This issue arises from improper handling of user-supplied data during web page...

8.6AI score0.0023EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•9 views

CVE-2026-2486: Improper Neutralization of Input During Web Page Generation

The Master Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'maelbhtablebtntext' parameter in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6.1AI score0.00161EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/19 11:54 p.m.•22 views

WordPress Master Addons For Elementor plugin <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'maelbhtablebtntext' vulnerability discovered by Thanakorn Bunsin - KMITL in WordPress Plugin Master Addons for Elementor versions = 2.1.1...

6.4CVSS5.5AI score0.00161EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/02/19 9:17 a.m.•5 views

Improper Authorization

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Authorization in the /protocol/docker-v2/auth endpoint, which does not ensure that the client is in...

5.1CVSS5.8AI score0.0044EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/19 9:16 a.m.•15 views

CVE-2026-25329

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

4.3CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/19 9:16 a.m.•20 views

CVE-2026-25324

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

5.3CVSS0.00334EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/19 8:26 a.m.•10 views

CVE-2026-25324

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

5.5AI score0.00334EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/19 8:26 a.m.•10 views

CVE-2026-25324 WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

5.3CVSS6AI score0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/19 8:26 a.m.•39 views

CVE-2026-25329 WordPress Quiz And Survey Master plugin <= 10.3.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

4.3CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/19 8:26 a.m.•5 views

CVE-2026-25329 WordPress Quiz And Survey Master plugin <= 10.3.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

4.3CVSS6AI score0.00197EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/19 8:26 a.m.•11 views

CVE-2026-25329

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

5.5AI score0.00197EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/19 8:26 a.m.•30 views

CVE-2026-25329

CVE-2026-25329 : Missing Authorization in the WordPress plugin Quiz And Survey Master (quiz-master-next) up to version 10.3.4 — due to an incorrectly configured access control level that leads to a broken access control vulnerability. The available sources describe the issue but do not provide co...

4.3CVSS6AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/19 8:26 a.m.•44 views

CVE-2026-25324 WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

5.3CVSS0.00334EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/19 8:26 a.m.•30 views

CVE-2026-25324

CVE-2026-25324 involves the WordPress Quiz And Survey Master plugin (

5.3CVSS6AI score0.00334EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/02/19 5:01 a.m.•13 views

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error via the decodebase64 function in the Encrypted XLSX File Parser component. An attacker can cause a denial of service by executing a manipulation that triggers an off-by-one error. Remediation A fix was pushed into the...

5.5CVSS5.4AI score0.00199EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•6 views

CVE-2026-25329: Missing Authorization

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

4.3CVSS6AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•22 views

WordPress plugin Quiz And Survey Master 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•14 views

PT-2026-20697

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

5.5AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder