Lucene search
K

9265 matches found

OSV
OSV
added 2026/01/08 5:15 p.m.1 views

CVE-2025-56424

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...

7.5CVSS5.9AI score0.00275EPSS
Exploits1References2
NVD
NVD
added 2026/01/08 5:15 p.m.3 views

CVE-2025-56424

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...

7.5CVSS0.00275EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/08 12:0 a.m.2 views

CVE-2025-56424

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...

6.3AI score0.00275EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/01/08 12:0 a.m.17 views

CVE-2025-56424

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...

0.00275EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.3 views

PT-2026-1818

Name of the Vulnerable Software and Affected Versions Insiders Technologies GmbH e-invoice pro versions prior to release 1 Service Pack 2 Description A flaw exists in Insiders Technologies GmbH e-invoice pro that could allow a remote attacker to cause a denial of service by using a specially...

7.5CVSS6.5AI score0.00275EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:30 a.m.4 views

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

5.4CVSS6AI score0.01136EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.4 views

CVE-2025-1457

The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Wrapper Link, Countdown and Gallery widgets in all versions up to, and including, 5.10.28 due to insufficient input sanitization...

6.4CVSS5.9AI score0.00256EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/06 11:14 a.m.1 views

CVE-2025-31044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS5.6AI score0.00029EPSS
Exploits0References1
NVD
NVD
added 2026/01/05 11:17 a.m.1 views

CVE-2025-31044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS0.00029EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/05 10:23 a.m.1 views

EUVD-2026-0870

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS7.1AI score0.00029EPSS
Exploits0References2
CVE
CVE
added 2026/01/05 10:23 a.m.14 views

CVE-2025-31044

Summary: CVE-2025-31044 is an SQL Injection in the WordPress plugin Premium SEO Pack (AA-Team Premium SEO Pack). The issue stems from improper neutralization of special elements in SQL commands, allowing injection through the plugin’s queries. Affected versions are up to 3.3.2; no public exploit ...

8.5CVSS5.6AI score0.00029EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/05 10:23 a.m.24 views

CVE-2025-31044 WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS0.00029EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 10:23 a.m.1 views

CVE-2025-31044 WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS7.2AI score0.00029EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.2 views

WordPress plugin Premium SEO Pack SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injectio...

8.5CVSS7.7AI score0.00029EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.2 views

PT-2026-1262

Name of the Vulnerable Software and Affected Versions AA-Team Premium SEO Pack versions through 3.3.2 Description The software contains a flaw related to the improper handling of special characters within SQL commands, which could lead to SQL Injection. The issue allows manipulation of SQL querie...

8.5CVSS7AI score0.00029EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/01/01 4:26 p.m.6 views

CVE-2025-62089

Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through = 4.2.1...

4.3CVSS5.9AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 4:15 p.m.2 views

CVE-2025-62089

Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through = 4.2.1...

4.3CVSS0.00014EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/31 3:51 p.m.22 views

CVE-2025-62089 WordPress Mergado Pack plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through = 4.2.1...

4.3CVSS0.00014EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 3:51 p.m.2 views

EUVD-2025-205996

Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through 4.2.0...

4.3CVSS6.3AI score0.00014EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/31 3:51 p.m.2 views

CVE-2025-62089 WordPress Mergado Pack plugin <= 4.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through 4.2.0...

4.3CVSS6.5AI score0.00014EPSS
Exploits0References1
Rows per page
Query Builder