Lucene search
+L

95684 matches found

CNNVD
CNNVD
added 2025/11/06 12:00 a.m.9 views

WordPress plugin PoloPag Pix Automático para Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.6AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.22 views

PT-2025-45332

Name of the Vulnerable Software and Affected Versions CMSimple XH version 1.8 Description A reflected Cross-Site Scripting XSS issue exists in the index.php router. The issue occurs because attacker-controlled path segments are not properly sanitized or encoded before being included in the...

7.1CVSS6AI score0.00331EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.11 views

WordPress plugin WP Customer Area 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.7AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.8 views

PT-2025-45289

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ApusTheme Famita famita allows PHP Local File Inclusion.This issue affects Famita: from n/a through = 1.54...

8.1CVSS7.1AI score0.00499EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.11 views

PT-2025-45288

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WPClever WPC Product Options for WooCommerce wpc-product-options allows PHP Local File Inclusion.This issue affects WPC Product Options for WooCommerce: from n/a through = 1.8.6...

7.5CVSS7.1AI score0.00458EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.13 views

PT-2025-45315

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through 4.2.0...

8CVSS7.1AI score0.00401EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.13 views

PT-2025-45204

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through = 3.4.4...

7.1AI score0.00499EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.10 views

WordPress plugin Lazy Load Optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

7.5CVSS6.7AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.15 views

WordPress plugin Premmerce Wholesale Pricing for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.7AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.13 views

PT-2025-45266

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows PHP Local File Inclusion.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

7.5CVSS7.1AI score0.0043EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.9 views

WordPress plugin Premmerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.7AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.12 views

PT-2025-45272

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in dedalx InHype - Blog & Magazine WordPress Theme inhype allows PHP Local File Inclusion.This issue affects InHype - Blog & Magazine WordPress Theme: from n/a through = 1.5.2...

8.2CVSS7.1AI score0.00404EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.13 views

WordPress plugin Premmerce User Roles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.6AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.9 views

WordPress plugin Immocaster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.00499EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/06 12:00 a.m.21 views

CVE-2025-63589

A reflected XSS vulnerability exists in CMSimpleXH 1.8's index.php router when attacker-controlled path segments are not sanitized or encoded before being inserted into the generated HTML navigation links, breadcrumbs, search form action, footer links. An attacker-controlled string placed in the...

0.00331EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.15 views

WordPress plugin LearnPress Export Import 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

7.5CVSS6.5AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.12 views

PT-2025-45267

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows PHP Local File Inclusion.This issue affects Premmerce Product Search for WooCommerce: from n/a through ...

7.5CVSS7.1AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.14 views

PT-2025-45275

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through = 2.3.6...

7.5CVSS7.1AI score0.0043EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/05 9:15 p.m.7 views

CVE-2025-60784

A vulnerability in the XiaozhangBang Voluntary Like System V8.8 allows remote attackers to manipulate the zhekou parameter in the /topfirst.php Pay module, enabling unauthorized discounts. By sending a crafted HTTP POST request with zhekou set to an abnormally low value, an attacker can purchase...

6.5CVSS0.0036EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/05 7:16 p.m.11 views

CVE-2025-55341

Cross Site Scripting vulnerability in Quipux 4.0.1 through e1774ac allows anexos/anexosnuevo.php asocImgRad...

6.5CVSS0.00208EPSS
SaveExploits0References2
Rows per page
Query Builder