Lucene search
K

6 matches found

OSV
OSV
added 2025/10/23 1:15 p.m.1 views

CVE-2025-8427

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

5.4CVSS5.9AI score
Exploits0References2
CVE
CVE
added 2025/10/23 12:32 p.m.11 views

CVE-2025-8427

Beaver Builder Plugin (Starter Version) for WordPress (

6.4CVSS4.7AI score0.00024EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.3 views

PT-2025-43511

Name of the Vulnerable Software and Affected Versions Beaver Builder Plugin Starter Version versions through 2.9.2.1 Description The Beaver Builder Plugin Starter Version for WordPress is susceptible to Stored Cross-Site Scripting through the auto play parameter. Insufficient input sanitization a...

6.4CVSS5.3AI score0.00024EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/22 8:26 a.m.4 views

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

9.8CVSS8.1AI score0.00264EPSS
Exploits1References1
Prion
Prion
added 2019/04/02 7:29 p.m.13 views

Sql injection

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

7.5CVSS9.8AI score0.00264EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/04/02 6:51 p.m.9 views

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

10AI score0.00264EPSS
Exploits1References1
Rows per page
Query Builder