Lucene search
K

8319 matches found

Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.4 views

PT-2025-4470 · Unknown · Simple Plugins Target Notifications

Name of the Vulnerable Software and Affected Versions: Simple Plugins Target Notifications versions n/a through 1.1.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS attacks. This enables attacke...

7.1CVSS8.5AI score0.00246EPSS
Exploits0References5
NVD
NVD
added 2025/01/02 12:15 p.m.14 views

CVE-2024-56261

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins Project Showcase gs-projects allows Stored XSS.This issue affects Project Showcase: from n/a through = 1.1.1...

6.5CVSS0.00245EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.4 views

CVE-2023-47689

Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through 3.0.10...

6.5CVSS0.00384EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.9 views

CVE-2023-46628

Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4...

4.3CVSS0.00267EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.5 views

CVE-2023-46188

Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Plugin manager and cleanup: from n/a through 2.1.3...

4.3CVSS0.00404EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:1 p.m.7 views

CVE-2024-56261 WordPress Project Showcase plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins Project Showcase allows Stored XSS.This issue affects Project Showcase: from n/a through 1.1.1...

6.5CVSS6.8AI score0.00245EPSS
Exploits0References1
CVE
CVE
added 2025/01/02 12:1 p.m.42 views

CVE-2024-56261

CVE-2024-56261 is a Stored XSS in the WordPress plugin Project Showcase (GS Projects). Affected: Project Showcase from n/a through 1.1.1. Root cause is improper neutralization of input during web page generation. Impact is stored cross-site scripting that can affect authenticated users (Contribut...

6.5CVSS7.2AI score0.00245EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:0 p.m.8 views

CVE-2023-46628 WordPress WP Word Count plugin <= 3.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4...

4.3CVSS8.5AI score0.00267EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/02 12:0 p.m.15 views

CVE-2023-46628 WordPress WP Word Count plugin <= 3.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4...

4.3CVSS0.00267EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 11:59 a.m.7 views

CVE-2023-46188 WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Plugin manager and cleanup: from n/a through 2.1.3...

4.3CVSS8.5AI score0.00404EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/02 11:59 a.m.14 views

CVE-2023-46188 WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Plugin manager and cleanup: from n/a through 2.1.3...

4.3CVSS0.00404EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.6 views

PT-2025-1505 · Unknown · Freesoul Deactivate Plugins

Name of the Vulnerable Software and Affected Versions: Freesoul Deactivate Plugins – Plugin manager and cleanup versions 2.1.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Thi...

4.3CVSS9.4AI score0.00404EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-3226 · Unknown · Gs Plugins Project Showcase

Name of the Vulnerable Software and Affected Versions: GS Plugins Project Showcase versions 1.1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS vulnerability. This allows for Stored XSS...

6.5CVSS7.8AI score0.00245EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.3 views

WordPress plugin Freesoul Deactivate Plugins 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.8AI score0.00404EPSS
Exploits0References1
CVE
CVE
added 2024/12/31 11:9 p.m.70 views

CVE-2024-56020

CVE-2024-56020 (SvegliaT Buttons) is a stored XSS vulnerability in SvegliaT Buttons (Mario Di Pasquale) affecting versions up to 1.3.0. The issue is described as Improper Neutralization of Input During Web Page Generation (XSS) and is labeled as an authenticated (Contributor+) vulnerability. The ...

6.5CVSS7.2AI score0.00234EPSS
Exploits0References1
OSV
OSV
added 2024/12/31 6:15 a.m.4 views

CVE-2024-11972

The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk Companion WordPress plugin...

9.8CVSS5.9AI score0.54754EPSS
Exploits5References1
Debian
Debian
added 2024/12/29 3:26 p.m.15 views

[SECURITY] [DSA 5838-1] gst-plugins-good1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5838-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 29, 2024 https://www.debian.org/security/faq -...

9.8CVSS8AI score0.01344EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/12/29 12:0 a.m.13 views

Debian dsa-5838 : gstreamer1.0-gtk3 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5838 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5838-1 [email protected] https://www.debian.org/securit...

9.8CVSS7.4AI score0.01344EPSS
Exploits0References46
OSV
OSV
added 2024/12/29 12:0 a.m.20 views

DSA-5838-1 gst-plugins-good1.0 - security update

Bulletin has no description...

9.8CVSS7.8AI score0.01344EPSS
Exploits0
OSV
OSV
added 2024/12/27 12:33 p.m.1 views

OESA-2024-2596 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

9.8CVSS6.9AI score0.01344EPSS
Exploits0References23
Rows per page
Query Builder