Lucene search
+L

7949 matches found

RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•16 views

CVE-2025-69316

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through = 1.0.4.2...

7.1CVSS5.4AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•20 views

CVE-2026-22347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

6.5CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Circl
Circl
•added 2026/01/23 8:25 p.m.•21 views

CVE-2025-70985

creationtimestamp| type| source ---|---|--- 2026-01-23 20:25:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4jtv5his2r 2026-01-23 20:25:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4jup2stb27 2026-01-23 23:46:16+00:00| seen|...

9.1CVSS5.8AI score0.00421EPSS
SaveExploits1References3
Circl
Circl
•added 2026/01/23 8:24 p.m.•14 views

CVE-2025-70983

creationtimestamp| type| source ---|---|--- 2026-01-23 20:24:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4jto57n42o 2026-01-23 20:25:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4juhhgi22r 2026-01-23 23:21:56+00:00| seen|...

5.8AI score0.00415EPSS
SaveExploits0References3
Circl
Circl
•added 2026/01/23 8:24 p.m.•17 views

CVE-2025-70986

creationtimestamp| type| source ---|---|--- 2026-01-23 20:24:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4jtgybgf2a 2026-01-23 20:25:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4juaj7t724 2026-01-23 23:36:15+00:00| seen|...

7.5CVSS5.8AI score0.00443EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/23 3:16 p.m.•17 views

CVE-2026-24596

Cross-Site Request Forgery CSRF vulnerability in marynixie Related Posts Thumbnails Plugin for WordPress related-posts-thumbnails allows Cross Site Request Forgery.This issue affects Related Posts Thumbnails Plugin for WordPress: from n/a through = 4.3.2...

4.3CVSS0.00153EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/23 3:16 p.m.•22 views

CVE-2026-24587

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS0.00301EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/23 2:29 p.m.•53 views

CVE-2026-24596 WordPress Related Posts Thumbnails plugin for WordPress plugin <= 4.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in marynixie Related Posts Thumbnails Plugin for WordPress related-posts-thumbnails allows Cross Site Request Forgery.This issue affects Related Posts Thumbnails Plugin for WordPress: from n/a through = 4.3.2...

4.3CVSS0.00153EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:29 p.m.•16 views

CVE-2026-24596

Cross-Site Request Forgery CSRF vulnerability in marynixie Related Posts Thumbnails Plugin for WordPress related-posts-thumbnails allows Cross Site Request Forgery.This issue affects Related Posts Thumbnails Plugin for WordPress: from n/a through = 4.3.1...

4.7CVSS5.9AI score0.00153EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/23 2:29 p.m.•9 views

CVE-2026-24596 WordPress Related Posts Thumbnails plugin for WordPress plugin <= 4.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in marynixie Related Posts Thumbnails Plugin for WordPress related-posts-thumbnails allows Cross Site Request Forgery.This issue affects Related Posts Thumbnails Plugin for WordPress: from n/a through = 4.3.2...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/23 2:29 p.m.•81 views

CVE-2026-24596

CVE-2026-24596 is a CSRF vulnerability in the WordPress plugin Related Posts Thumbnails (versions up to 4.3.1). The issue allows Cross-Site Request Forgery, affecting the Related Posts Thumbnails Plugin for WordPress from an unspecified early version to 4.3.1. The CVE entry provides a CVSS v3.1 b...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/23 2:29 p.m.•46 views

CVE-2026-24587 WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS0.00301EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/23 2:29 p.m.•12 views

CVE-2026-24587 WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS6AI score0.00301EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:29 p.m.•11 views

CVE-2026-24587

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS5.9AI score0.00301EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/23 2:29 p.m.•37 views

CVE-2026-24587

CVE-2026-24587 affects the WordPress plugin AJAX Hits Counter + Popular Posts Widget (ajax-hits-counter). Connected sources confirm a Missing Authorization / Broken Access Control vulnerability in this plugin, affecting versions up to and including 0.10.210305. Core details from Red Hat/NVD/CVE l...

5.4CVSS6AI score0.00301EPSS
SaveExploits0References1
Circl
Circl
•added 2026/01/23 1:59 p.m.•15 views

CVE-2026-0710

creationtimestamp| type| source ---|---|--- 2026-01-23 13:59:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3uda7j4c2g 2026-01-23 14:20:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3vi4a5g42h...

8.4CVSS5.8AI score0.00241EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/23 10:02 a.m.•18 views

CVE-2026-22273

creationtimestamp| type| source ---|---|--- 2026-01-23 10:02:40+00:00| seen| https://gist.github.com/Darkcrai86/d6117bdc3820e7f0ced37f6026416c0e 2026-01-23 10:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hwvfh3p27 2026-01-23 10:18:44+00:00| seen|...

8.8CVSS7.8AI score0.0037EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/23 6:19 a.m.•21 views

CVE-2026-23961

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...

5.3CVSS5.8AI score0.00447EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•7 views

CVE-2026-24596: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in marynixie Related Posts Thumbnails Plugin for WordPress related-posts-thumbnails allows Cross Site Request Forgery.This issue affects Related Posts Thumbnails Plugin for WordPress: from n/a through = 4.3.2...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•30 views

WordPress plugin AJAX Hits Counter + Popular Posts Widget security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.4CVSS5.8AI score0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder