Lucene search
+L

16011 matches found

NVD
NVD
added 2025/10/29 2:15 p.m.8 views

CVE-2025-64135

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb8 and earlier sets the Java system property jdk.http.auth.tunneling.disabledSchemes to an empty value, disabling a protection mechanism of the Java runtime...

5.9CVSS0.003EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/29 1:29 p.m.14 views

CVE-2025-64135

The CVE-2025-64135 entry concerns Jenkins Eggplant Runner Plugin (versions up to 0.0.1.301.v963cffe8ddb_8 and earlier). The vulnerability arises from the Java system property jdk.http.auth.tunneling.disabledSchemes being set to an empty value during proxy configuration, which disables a Java runt...

5.9CVSS6.4AI score0.003EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/10/29 1:29 p.m.12 views

CVE-2025-64135

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb8 and earlier sets the Java system property jdk.http.auth.tunneling.disabledSchemes to an empty value, disabling a protection mechanism of the Java runtime...

0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.34 views

CVE-2025-64291 WordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issue affects Premmerce User Roles: from n/a through = 1.0.13...

5.9CVSS0.0017EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.33 views

CVE-2025-64291

CVE-2025-64291 concerns the WordPress plugin Premmerce User Roles (versions

5.9CVSS5.6AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.25 views

CVE-2025-64289

CVE-2025-64289 affects the WordPress plugin Premmerce Product Search for WooCommerce (premmerce-search), with versions up to and including 2.2.4. The issue is Improper Neutralization of Input During Web Page Generation, leading to a Stored Cross-Site Scripting (XSS) vulnerability. The CVSS indica...

5.9CVSS5.9AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.20 views

CVE-2025-64226

CVE-2025-64226 is a CSRF vulnerability in the WordPress plugin Stockie Extra (stockie-extra), affecting versions up to and including 1.2.11. The issue enables Cross-Site Request Forgery where an attacker could abuse authenticated sessions to perform unwanted actions on behalf of a user. The CVSS ...

4.3CVSS6.5AI score0.00119EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.11 views

CVE-2025-58939 WordPress Super Store Finder plugin <= 7.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in highwarden Super Store Finder superstorefinder-wp allows Cross Site Request Forgery.This issue affects Super Store Finder: from n/a through = 7.5...

4.3CVSS0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/29 6:0 a.m.15 views

CVE-2025-9544 Doppler Forms <= 2.5.1 - Subscriber+ Limited Plugin Installation

The Doppler Forms WordPress plugin through 2.5.1 registers an AJAX action installextension without verifying user capabilities or using a nonce. As a result, any authenticated user — including those with the Subscriber role — can install and activate additional Doppler Forms WordPress plugin...

0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 4:50 a.m.3 views

CVE-2025-49042 WordPress WooCommerce plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic WooCommerce woocommerce allows Stored XSS.This issue affects WooCommerce: from n/a through = 10.0.2...

5.9CVSS5.2AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.10 views

Jenkins ByteGuard Build Actions Plugin 安全漏洞

Jenkins ByteGuard Build Actions Plugin is an open source pipeline validation plugin for Jenkins. A security vulnerability exists in version 1.0 of the Jenkins ByteGuard Build Actions Plugin, which stems from an unmasked API token on a job configuration form, which could lead to an attacker...

4.3CVSS6.4AI score0.00161EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.6 views

WordPress plugin Premmerce User Roles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.9CVSS5.9AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.6 views

PT-2025-44298

Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A cross-site request forgery CSRF flaw exists in the Jenkins Publish to Bitbucket Plugin. This issue allows attackers to connect to a URL specified by the attacker,...

5.4CVSS6.4AI score0.00192EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.7 views

WordPress plugin Stockie Extra 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00119EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/28 6:16 a.m.8 views

WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.1.7 - Authenticated (Author+) Server-Side Request Forgery vulnerability

Authenticated Author+ Server-Side Request Forgery vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Auto Featured Image Auto Post Thumbnail versions = 4.1.7...

6.8AI score0.00042EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/10/27 2:15 a.m.23 views

CVE-2025-62937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Johnny Post List Featured Image post-list-featured-image allows Stored XSS.This issue affects Post List Featured Image: from n/a through = 0.5.9...

6.5CVSS0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.6 views

CVE-2025-62984 WordPress WP AdCenter plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPeka WP AdCenter wpadcenter allows Stored XSS.This issue affects WP AdCenter: from n/a through = 2.6.1...

6.5CVSS5.6AI score0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.14 views

CVE-2025-62982

CVE-2025-62982 : WordPress plugin Dynamic User Directory (&lt;= v2.3) contains a stored XSS flaw due to improper input neutralization during page generation. Wordfence corroborates the CVE and notes the issue affects Dynamic User Directory

5.9CVSS5.6AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.18 views

CVE-2025-62972 WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through = 1.33.28...

4.3CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.3 views

CVE-2025-62967 WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through = 3.6.25...

6.5CVSS5.9AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder