Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.3 views

CVE-2026-25432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.6.7...

6.5CVSS5.5AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.2 views

CVE-2026-25432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.6.7...

6.5CVSS0.00045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:27 a.m.2 views

CVE-2026-25432 WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.6.7...

6.5CVSS5.5AI score0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:27 a.m.8 views

CVE-2026-25432

CVE-2026-25432 affects the WordPress Omnipress plugin (

6.5CVSS5.4AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:27 a.m.23 views

CVE-2026-25432 WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.6.7...

6.5CVSS0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:27 a.m.1 views

CVE-2026-25432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.6.7...

5.5AI score0.00045EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.6 views

PT-2026-20746

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through = 1.6.7...

5.5AI score0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.2 views

WordPress plugin Omnipress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.7AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/25 10:44 a.m.3 views

WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Omnipress versions = 1.6.7...

6.5CVSS5.4AI score0.00045EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/01/24 5:59 p.m.4 views

WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by theviper17 in WordPress Plugin Omnipress versions = 1.6.7...

7.6CVSS5.9AI score0.0022EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/24 3:17 p.m.2 views

CVE-2026-24538

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through = 1.6.7...

7.5CVSS5.9AI score0.0022EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.2 views

CVE-2026-24538

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through = 1.6.7...

7.5CVSS0.0022EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/23 2:28 p.m.29 views

CVE-2026-24538 WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through = 1.6.7...

7.5CVSS0.0022EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.1 views

CVE-2026-24538

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through = 1.6.6...

7.6CVSS5.9AI score0.0022EPSS
Exploits0References2
CVE
CVE
added 2026/01/23 2:28 p.m.8 views

CVE-2026-24538

CVE-2026-24538 affects the WordPress Omnipress plugin (Omnipress) with Local File Inclusion via improper handling of include/require filenames. Affected versions are &lt;= 1.6.6 (Wordfence details also reference 1.6.7 to mitigate the issue; otherwise monitor for vendor patch updates.

7.5CVSS5.9AI score0.0022EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:28 p.m.1 views

CVE-2026-24538 WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through = 1.6.7...

7.5CVSS5.9AI score0.0022EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.1 views

WordPress plugin Omnipress has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.5CVSS5.8AI score0.0022EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.3 views

PT-2026-4385

Name of the Vulnerable Software and Affected Versions omnipressteam Omnipress versions through 1.6.6 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...

5.3AI score0.0022EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.9 views

WordPress Omnipress plugin <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Kai Aizen in WordPress Plugin Omnipress versions = 1.6.5...

6.4CVSS5.9AI score0.00013EPSS
Exploits2References1Affected Software1
Packet Storm
Packet Storm
added 2025/12/16 12:0 a.m.128 views

📄 WordPress Omnipress 1.6.3 Cross Site Scripting

WordPress Omnipress plugin versions 1.6.3 and below suffer from a persistent cross site scripting vulnerability. CVE-2025-12163: Stored Cross-Site Scripting in Omnipress WordPress Plugin Keywords: CVE-2025-XXXXX, Omnipress WordPress vulnerability, stored XSS, WordPress security, authenticated XSS...

6.4CVSS6.4AI score0.00013EPSS
Exploits2
Rows per page
Query Builder