Lucene search
+L

1126 matches found

CNNVD
CNNVD
added 2025/01/07 12:00 a.m.12 views

WordPress plugin Unilevel MLM Plan 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.8AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.11 views

WordPress plugin WP – Bulk SMS – by SMS.to 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS7.7AI score0.00354EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.9 views

WordPress plugin JoomSport 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

7.1CVSS7.7AI score0.00285EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/04 12:00 a.m.16 views

PT-2025-3783 · Unknown · Campcodes School Faculty Scheduling System

Name of the Vulnerable Software and Affected Versions: Campcodes School Faculty Scheduling System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /admin/index.php. The manipulation of the page argument leads to file inclusion. Th...

9.8CVSS6.7AI score0.00676EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/01/04 12:00 a.m.6 views

PT-2025-1929 · WordPress · Wp Smart Import

Name of the Vulnerable Software and Affected Versions: WP Smart Import : Import any XML File to WordPress plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and...

6.1CVSS8.7AI score0.00363EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/01/04 12:00 a.m.8 views

WordPress plugin WP Smart Import 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.7AI score0.00363EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/24 12:00 a.m.8 views

WordPress plugin WP-Appbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

6.1CVSS7.6AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/24 12:00 a.m.9 views

PT-2024-17719 · WordPress · Wp-Appbox

Name of the Vulnerable Software and Affected Versions: WP-Appbox plugin for WordPress versions up to, and including, 4.5.3 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output escaping. This allows...

6.1CVSS8.7AI score0.00359EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/12/17 12:00 a.m.11 views

PT-2024-17450 · WordPress · Sikshya Lms

Name of the Vulnerable Software and Affected Versions: Sikshya LMS plugin for WordPress versions up to, and including, 0.0.21 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output escaping. This allows...

6.1CVSS8.7AI score0.00352EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/12/14 12:00 a.m.11 views

PT-2024-17583 · WordPress · Wp Ad Guru

Name of the Vulnerable Software and Affected Versions: WP Ad Guru plugin for WordPress versions up to, and including, 2.5.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject...

6.1CVSS6.4AI score0.00291EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/14 12:00 a.m.14 views

WordPress plugin WP Ad Guru 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

6.1CVSS7.9AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/14 12:00 a.m.7 views

PT-2024-17590 · WordPress · Import Eventbrite Events

Name of the Vulnerable Software and Affected Versions: Import Eventbrite Events plugin for WordPress versions up to, and including, 1.7.4 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output escaping. This...

6.1CVSS6.8AI score0.00363EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/12/12 12:00 a.m.13 views

PT-2024-17512 · WordPress · Wp Service Payment Form With Authorize.Net

Name of the Vulnerable Software and Affected Versions: WP Service Payment Form With Authorize.net plugin for WordPress versions prior to 2.6.3 Description: The issue is related to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scrip...

6.1CVSS7.5AI score0.00421EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/12 12:00 a.m.13 views

PT-2024-17593 · WordPress · Bp Email Assign Templates

Name of the Vulnerable Software and Affected Versions: BP Email Assign Templates plugin for WordPress versions up to and including 1.5 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in page...

6.1CVSS7.4AI score0.00406EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/12 12:00 a.m.10 views

PT-2024-17464 · WordPress · Video & Photo Gallery For Ultimate Member

Name of the Vulnerable Software and Affected Versions: Video & Photo Gallery for Ultimate Member plugin for WordPress versions up to, and including, 1.1.1 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output...

6.1CVSS6.8AI score0.00406EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/12/12 12:00 a.m.13 views

PT-2024-17461 · WordPress +1 · Autoblogging Seo Help +2

Name of the Vulnerable Software and Affected Versions: AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress versions up to, and including, 6.1.3 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input...

6.1CVSS6.9AI score0.00397EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/10 12:00 a.m.10 views

WordPress plugin turboSMTP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.9AI score0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/10 12:00 a.m.8 views

PT-2024-17542 · WordPress · Turbosmtp

Name of the Vulnerable Software and Affected Versions: turboSMTP plugin for WordPress versions up to, and including, 4.6 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output escaping. This allows unauthenticat...

6.1CVSS6.7AI score0.00357EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.10 views

PT-2024-17565 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file /index.php. The manipulation of the page argument...

6.9CVSS7AI score0.00436EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/12/07 12:00 a.m.13 views

WordPress plugin CardGate Payments for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.7AI score0.00284EPSS
SaveExploits0References2
Rows per page
Query Builder