Lucene search
+L

82 matches found

NVD
NVD
added 2026/07/23 8:16 a.m.7 views

CVE-2026-9635

The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the tab shortcode in versions up to, and including, 1.4.17. This is due to insufficient input sanitization and output escaping in the mtstabs function, which outputs the...

6.4CVSS0.00187EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/23 6:52 a.m.15 views

CVE-2026-9635

The CVE concerns the WP Shortcode by MyThemeShop plugin for WordPress. A stored XSS exists in the [tab] shortcode via the 'title' attribute in versions up to 1.4.17. The root cause is insufficient input sanitization and output escaping in the mts_tabs() function, which directly echoes the title a...

6.4CVSS5.5AI score0.00187EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/23 6:52 a.m.6 views

EUVD-2026-47935

The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the tab shortcode in versions up to, and including, 1.4.17. This is due to insufficient input sanitization and output escaping in the mtstabs function, which outputs the...

6.4CVSS5.6AI score0.00187EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.19 views

CVE-2026-24522

Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscribe: from n/a through = 1.2.16...

4.3CVSS5.4AI score0.00185EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.7 views

CVE-2026-24522

Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscribe: from n/a through = 1.2.16...

4.3CVSS0.00185EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.6 views

CVE-2026-24522

Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscribe: from n/a through = 1.2.16...

4.3CVSS5.9AI score0.00185EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:36 a.m.11 views

CVE-2019-7411

Multiple stored cross-site scripting XSS in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: 1 Title, 2 Favicon, 3 Meta Description, 4 Subscribe Form Name field label, Last name field label, Email...

5.4CVSS5.4AI score0.00924EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-16953

Malware in sbrugna...

5.4CVSS5.5AI score0.00924EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-23420

Malware in sbrugna...

4.8CVSS5AI score0.00543EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-23405

Malware in sbrugna...

4.8CVSS5.2AI score0.00475EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-32165

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00309EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-12387

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00205EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-36929

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-36895

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-34887

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00326EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-27979

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00521EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:8 a.m.9 views

CVE-2024-37938

Cross-Site Request Forgery CSRF vulnerability in MyThemeShop SociallyViral.This issue affects SociallyViral: from n/a through 1.0.10...

4.3CVSS7AI score0.00183EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:43 a.m.5 views

CVE-2024-37452

Cross-Site Request Forgery CSRF vulnerability in MyThemeShop Schema Lite allows Cross Site Request Forgery.This issue affects Schema Lite: from n/a through 1.2.2...

4.3CVSS5.1AI score0.00159EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:18 a.m.5 views

CVE-2023-30472

Unauth. Reflected Cross-Site Scripting XSS vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin = 1.0.17 versions...

7.1CVSS5.8AI score0.00326EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:12 a.m.7 views

CVE-2023-23896

Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17...

8.8CVSS8AI score0.00521EPSS
SaveExploits0References1
Rows per page
Query Builder