Lucene search
+L

80 matches found

Cvelist
Cvelist
•added 2025/08/14 10:34 a.m.•27 views

CVE-2025-52728 WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

7.5CVSS0.00628EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•1 views

CVE-2025-52728: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

7.5CVSS5.8AI score0.00628EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•27 views

WordPress plugin Responsive Posts Carousel WordPress Plugin Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.5CVSS5.8AI score0.00628EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/14 12:00 a.m.•16 views

PT-2025-33209 · WordPress · Webcodingplace Responsive Posts Carousel

Name of the Vulnerable Software and Affected Versions: WebCodingPlace Responsive Posts Carousel WordPress Plugin versions through 15.0 Description: The vulnerability involves improper control of filename handling for include/require statements in a PHP program, specifically a PHP Local File...

7.5CVSS6.5AI score0.00628EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/08/13 11:29 a.m.•16 views

WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Responsive Posts Carousel Pro versions = 15.0...

7.5CVSS6.8AI score0.00628EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/08 11:58 a.m.•14 views

CVE-2025-39358

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS5.9AI score0.00437EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 12:15 p.m.•17 views

CVE-2025-39358

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 11:47 a.m.•6 views

CVE-2025-39358 WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS5.2AI score0.00437EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 11:47 a.m.•31 views

CVE-2025-39358 WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS0.00437EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 11:47 a.m.•55 views

CVE-2025-39358

CVE-2025-39358 affects WordPress plugin WP Posts Carousel (versions up to and including 1.3.12). The vulnerability is Deserialization of Untrusted Data leading to PHP Object Injection, reported for authenticated contexts (Contributor+). Patchstack and CVE records indicate the issue is fixed in ve...

8.8CVSS5.9AI score0.00437EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•14 views

WordPress plugin WP Posts Carousel 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.8CVSS8.2AI score0.00437EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•11 views

PT-2025-24078 · WordPress · Wp Posts Carousel

Name of the Vulnerable Software and Affected Versions: WP Posts Carousel versions 1.3.12 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in WP Posts Carousel. Recommendations: For WP Posts Carousel versions 1.3.12 and earlier, upda...

8.8CVSS8.5AI score0.00437EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/04/25 10:57 p.m.•23 views

CVE-2025-39573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.10...

6.5CVSS7.2AI score0.00318EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/16 1:15 p.m.•13 views

CVE-2025-39573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.10...

6.5CVSS0.00318EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 12:44 p.m.•69 views

CVE-2025-39573

CVE-2025-39573 affects the WordPress plugin WP Posts Carousel up to version 1.3.10, with a stored XSS flaw caused by improper input neutralization during web page generation. The vulnerability has been characterized with CVSS v3.1 base score 6.5 (Medium) by Patchstack/Wordfence assessments. Publi...

6.5CVSS7.2AI score0.00318EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/16 12:44 p.m.•11 views

CVE-2025-39573 WordPress WP Posts Carousel <= 1.3.10 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel allows Stored XSS. This issue affects WP Posts Carousel: from n/a through 1.3.10...

6.5CVSS6.9AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•11 views

WordPress plugin WP Posts Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.5CVSS6.7AI score0.00318EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•16 views

PT-2025-16601 · WordPress · Wp Posts Carousel

Name of the Vulnerable Software and Affected Versions: WP Posts Carousel versions 1.3.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For WP...

6.5CVSS6.6AI score0.00318EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/30 10:22 a.m.•32 views

CVE-2025-31094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.8...

6.5CVSS7.2AI score0.00206EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/29 12:14 p.m.•28 views

CVE-2025-30920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.7...

6.5CVSS7.2AI score0.00287EPSS
SaveExploits0References1
Rows per page
Query Builder