Lucene search
+L

398 matches found

NVD
NVD
•added 2025/11/21 1:15 p.m.•15 views

CVE-2025-66081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.9CVSS0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/21 12:29 p.m.•11 views

CVE-2025-66081 WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.9CVSS5.8AI score0.00204EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/21 12:29 p.m.•17 views

EUVD-2025-198466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.4CVSS5.5AI score0.00204EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/21 12:29 p.m.•30 views

CVE-2025-66081

CVE-2025-66081 affects the WordPress Head Meta Data plugin. The vulnerability is a stored XSS caused by improper input neutralization during web page generation, affecting versions up to and including 20250327. The CVSSv3.1 base score is 5.4 (Medium). Connected sources corroborate the stored XSS ...

5.9CVSS5.8AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/21 12:29 p.m.•25 views

CVE-2025-66081 WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.9CVSS0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/21 12:00 a.m.•20 views

PT-2025-47750

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

6AI score0.00204EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•20 views

WordPress plugin Head Meta Data 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

5.9CVSS5.9AI score0.00204EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•2 views

CVE-2025-66081: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.9CVSS5.8AI score0.00204EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/11 8:11 p.m.•10 views

Malicious code in nurul-sambel40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1782c5b256bcd0bd35dfcfd9d2666a33791fa5a5612bea58414c7a25e55a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/27 3:30 a.m.•17 views

EUVD-2025-35981

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.4...

8.1CVSS6.5AI score0.00218EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/27 1:34 a.m.•30 views

CVE-2025-62964

CVE-2025-62964 refers to a Missing Authorization vulnerability in the WordPress plugin MDTF (RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter). Connected sources indicate the flaw affects MDTF versions up to 1.3.6 (and possibly earlier) and arises from broken access control/security level ...

5.3CVSS6AI score0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/27 1:34 a.m.•30 views

CVE-2025-62964 WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.6...

5.3CVSS0.00218EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•21 views

PT-2025-43836

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.4...

8.1CVSS7AI score0.00218EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•2 views

CVE-2025-62964: Missing Authorization

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.6...

5.3CVSS5.9AI score0.00218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:14 p.m.•14 views

CVE-2025-49907

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.3.9...

4.3CVSS7AI score0.00306EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:13 p.m.•16 views

CVE-2025-62069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through = 1.3.3.8...

6.5CVSS5.8AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•18 views

EUVD-2025-35547

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.3.9...

8.2CVSS6.5AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:16 p.m.•27 views

CVE-2025-62069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through = 1.3.3.8...

6.5CVSS0.00176EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/22 3:15 p.m.•15 views

CVE-2025-49907

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.3.9...

4.3CVSS0.00306EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•30 views

CVE-2025-62069

CVE-2025-62069 concerns the MDTF – Meta Data and Taxonomies Filter (WordPress plugin) for RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter. The vulnerability is an XSS issue caused by improper input neutralization during web page generation, affecting MDTF versions from n/a up to and inclu...

6.5CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Rows per page
Query Builder