Lucene search
+L

16354 matches found

CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•16 views

WordPress plugin: The Great Firewords of China – Cross-site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin The Great...

6.5CVSS5.5AI score0.00274EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•23 views

WordPress plugin Fluent Forms has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8AI score0.00325EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•20 views

WordPress plugin Kush Micro News has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS8AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•21 views

WordPress plugin Revision Diet: Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8AI score0.00152EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•20 views

WordPress Plugin Style Manager has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

4.3CVSS8.2AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•29 views

WordPress plugin PDF 2: Code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

9.9CVSS8.4AI score0.20328EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•13 views

WordPress plugin Verowa Connect has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•21 views

WordPress plugin JS Job Manager has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS8.3AI score0.00509EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•25 views

WordPress plugin MapSVG Lite: Code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS8.3AI score0.0057EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•21 views

WordPress plugin JS Job Manager code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS8.3AI score0.0046EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•18 views

WordPress plugin uListing code issue vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

8.8CVSS8.4AI score0.00489EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•17 views

WordPress plugin SpiderDisplay has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.5AI score0.00293EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/16 10:15 p.m.•28 views

CVE-2025-32791

The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules. A vulnerability in the Backstage permission plugin backend allows callers to extract some information about the conditional decisions returned by the permission policy installed in the permission...

4.3CVSS0.00293EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 9:46 p.m.•83 views

CVE-2025-32791

The CVE-2025-32791 relates to information leakage in the Backstage permission backend (Backstage permission plugin). Affected component: the permission backend’s handling of conditional decisions. Root cause (as described): callers can extract information about conditional decisions returned by t...

4.3CVSS5.6AI score0.00293EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/16 5:37 p.m.•20 views

WordPress WP Simple Booking Calendar plugin <= 2.0.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Simple Booking Calendar versions = 2.0.13...

6.5CVSS8.4AI score0.00323EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/16 2:09 p.m.•14 views

WordPress Bulk Term Editor plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Bulk Term Editor versions = 1.1.4...

4.3CVSS8.1AI score0.00191EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/16 2:08 p.m.•17 views

WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Checkout Files Upload for WooCommerce versions = 2.2.0...

6.5CVSS8.4AI score0.0036EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/16 2:06 p.m.•13 views

WordPress Site Search 360 plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) to stored XSS vulnerability

Cross Site Request Forgery CSRF to stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Site Search 360 versions = 2.1.8...

7.1CVSS8.4AI score0.00189EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/16 2:01 p.m.•19 views

WordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by stealthcopter in WordPress Plugin Zephyr Project Manager versions = 3.3.200...

5.4CVSS8.2AI score0.00358EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/16 1:58 p.m.•22 views

WordPress WowStore plugin <= 4.2.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by astra.r3verii in WordPress Plugin WowStore versions = 4.2.4...

4.3CVSS8.4AI score0.0043EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder