Lucene search
+L

238712 matches found

CVE
CVE
added 2026/09/02 11:37 a.m.17 views

CVE-2026-84781

CVE-2026-84781 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the WordPress Gallery PhotoBlocks plugin, affecting versions ≤ 1.3.4 . The flaw was discovered by V1T via Patchstack. An attacker with at least Contributor privileges can inject malicious scripts that execute in ano...

6.5CVSS5.9AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.33 views

CVE-2026-81283 WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in WP User Frontend = 4.3.10 versions...

8.8CVSS0.00482EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 11:37 a.m.11 views

EUVD-2026-69922

Subscriber PHP Object Injection in WP User Frontend = 4.3.10 versions...

8.8CVSS5.9AI score0.00482EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.41 views

CVE-2026-84781 WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...

6.5CVSS0.00161EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/02 11:30 a.m.7 views

WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by momopon1415 in WordPress Plugin RTMKit versions = 2.1.5...

7.1CVSS5.1AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 11:16 a.m.8 views

WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Migrate Guru – Site Migration & Cloning versions = 6.65...

7.5CVSS5.2AI score0.00263EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 11:13 a.m.13 views

WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MalCare Security versions = 6.69...

7.5CVSS5.2AI score0.00263EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 11:02 a.m.6 views

WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by TwinSecKR in WordPress Plugin WP Statistics versions = 14.16.11...

6.1CVSS5.1AI score0.00149EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:41 a.m.8 views

WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by sicksec in WordPress Plugin LiteSpeed Cache versions = 7.9...

7.2CVSS5.2AI score0.00159EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:29 a.m.8 views

WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Gallery PhotoBlocks versions = 1.3.4...

6.5CVSS5.9AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:22 a.m.10 views

WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Asim Alshaya in WordPress Plugin WP Go Maps versions = 10.1.08...

5.3CVSS5.9AI score0.00299EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:20 a.m.7 views

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

5.3CVSS5.9AI score0.00238EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:19 a.m.9 views

WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Broken Link Checker versions = 2.4.14...

5.5CVSS5.9AI score0.00152EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:18 a.m.8 views

WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Brobicho in WordPress Plugin PublishPress Permissions versions = 4.8.3...

5.3CVSS5.9AI score0.00228EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:18 a.m.8 views

WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by John Ryan Albon in WordPress Plugin Mang Board WP versions = 2.3.8...

8.8CVSS5.9AI score0.00143EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:06 a.m.8 views

WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Anthony Green of Greenhat Security in WordPress Plugin Simply Schedule Appointments versions = 1.6.12.23...

8.8CVSS5.9AI score0.00143EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/09/02 10:03 a.m.9 views

WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Asim Alshaya in WordPress Plugin Activity Log versions = 2.13.1...

7.1CVSS5.9AI score0.00097EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/09/02 8:16 a.m.8 views

CVE-2025-7963

The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcodeeasywaveformplayer function in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00193EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/02 7:39 a.m.22 views

CVE-2026-75528

CVE-2026-75528 affects the Broken Link Checker plugin for WordPress in all versions up to and including 2.4.13 . The vulnerability is a Stored Cross-Site Scripting (XSS) caused by insufficient input sanitization and output escaping in the Comment Author URL / Link Log functionality. An unauthenti...

7.2CVSS6AI score0.00304EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2026/09/02 7:39 a.m.35 views

CVE-2025-7963 Easy Waveform Player <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_easywaveformplayer Function

The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcodeeasywaveformplayer function in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00193EPSS
SaveExploits0References4
Rows per page
Query Builder