Lucene search
K

8 matches found

EUVD
EUVD
added 2026/04/22 9:31 a.m.2 views

EUVD-2026-24642

The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2. This is due to insufficient input sanitization no sanitize callback on registersetting and missing output escaping no escattr ...

4.4CVSS5.9AI score0.00026EPSS
Exploits0References10
NVD
NVD
added 2026/04/22 9:16 a.m.0 views

CVE-2026-3362

The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2. This is due to insufficient input sanitization no sanitize callback on registersetting and missing output escaping no escattr ...

4.4CVSS0.00026EPSS
Exploits0References9
ATTACKERKB
ATTACKERKB
added 2026/04/22 7:45 a.m.2 views

CVE-2026-3362

The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2. This is due to insufficient input sanitization no sanitize callback on registersetting and missing output escaping no escattr ...

4.4CVSS5.9AI score0.00026EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2026/04/22 7:45 a.m.0 views

CVE-2026-3362 Short Comment Filter <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Minimum Count' Setting

The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2. This is due to insufficient input sanitization no sanitize callback on registersetting and missing output escaping no escattr ...

4.4CVSS5.9AI score0.00026EPSS
Exploits0References9
Cvelist
Cvelist
added 2026/04/22 7:45 a.m.23 views

CVE-2026-3362 Short Comment Filter <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Minimum Count' Setting

The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2. This is due to insufficient input sanitization no sanitize callback on registersetting and missing output escaping no escattr ...

4.4CVSS0.00026EPSS
Exploits0References9
CVE
CVE
added 2026/04/22 7:45 a.m.2 views

CVE-2026-3362

The CVE-2026-3362 entry affects the WordPress Short Comment Filter plugin (versions up to 2.2). The vulnerability is a Stored Cross-Site Scripting (Stored XSS) via the Minimum Count settings field. Root cause: insufficient input sanitization (no sanitize callback on register_setting) and missing ...

4.4CVSS5.9AI score0.00026EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.2 views

WordPress plugin Short Comment Filter 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.4CVSS5.8AI score0.00026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.1 views

PT-2026-34277

Name of the Vulnerable Software and Affected Versions Short Comment Filter versions prior to 2.3 Description The Short Comment Filter plugin for WordPress contains a Stored Cross-Site Scripting issue. The problem exists because the 'Minimum Count' settings field lacks proper input sanitization an...

4.4CVSS5.9AI score0.00026EPSS
Exploits0References12
Rows per page
Query Builder