Lucene search
K

6191 matches found

RedhatCVE
RedhatCVE
added 2025/06/08 1:18 p.m.6 views

CVE-2025-28966

Cross-Site Request Forgery CSRF vulnerability in dilemma123 Recent Posts Slider Responsive recent-posts-slider-responsive allows Stored XSS.This issue affects Recent Posts Slider Responsive: from n/a through = 1.0.1...

7.1CVSS5.9AI score0.00127EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/08 11:58 a.m.3 views

CVE-2025-39358

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS5.9AI score0.00364EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 1:15 p.m.7 views

CVE-2025-28966

Cross-Site Request Forgery CSRF vulnerability in dilemma123 Recent Posts Slider Responsive recent-posts-slider-responsive allows Stored XSS.This issue affects Recent Posts Slider Responsive: from n/a through = 1.0.1...

7.1CVSS0.00127EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 12:54 p.m.7 views

CVE-2025-28966 WordPress Recent Posts Slider Responsive plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in dilemma123 Recent Posts Slider Responsive recent-posts-slider-responsive allows Stored XSS.This issue affects Recent Posts Slider Responsive: from n/a through = 1.0.1...

7.1CVSS5.2AI score0.00127EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 12:54 p.m.39 views

CVE-2025-28966

CVE-2025-28966 affects the WordPress plugin Recent Posts Slider Responsive. The issue is a Cross-Site Request Forgery (CSRF) that enables Stored XSS, affecting versions from n/a up to 1.0.1. CVSS 3.1 base score 7.1 (HIGH) with network attack vector, no privileges required, user interaction requir...

7.1CVSS5.9AI score0.00127EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 12:54 p.m.16 views

CVE-2025-28966 WordPress Recent Posts Slider Responsive plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in dilemma123 Recent Posts Slider Responsive recent-posts-slider-responsive allows Stored XSS.This issue affects Recent Posts Slider Responsive: from n/a through = 1.0.1...

7.1CVSS0.00127EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 12:15 p.m.5 views

CVE-2025-39358

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS0.00364EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 11:47 a.m.13 views

CVE-2025-39358 WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS0.00364EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 11:47 a.m.2 views

CVE-2025-39358 WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Injection.This issue affects WP Posts Carousel: from n/a through = 1.3.12...

8.8CVSS5.2AI score0.00364EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 11:47 a.m.35 views

CVE-2025-39358

CVE-2025-39358 affects WordPress plugin WP Posts Carousel (versions up to and including 1.3.12). The vulnerability is Deserialization of Untrusted Data leading to PHP Object Injection, reported for authenticated contexts (Contributor+). Patchstack and CVE records indicate the issue is fixed in ve...

8.8CVSS5.9AI score0.00364EPSS
Exploits0References1
Circl
Circl
added 2025/06/06 3:0 a.m.18 views

CVE-2025-5749

creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-328/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:52+00:00| seen|...

8.8CVSS7AI score0.00171EPSS
Exploits0References3
Circl
Circl
added 2025/06/06 3:0 a.m.18 views

CVE-2025-5751

creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-330/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:52+00:00| seen|...

6.8CVSS7AI score0.00252EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.5 views

WordPress plugin Recent Posts Slider Responsive Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS5.7AI score0.00127EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.2 views

WordPress plugin WP Posts Carousel 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.8CVSS8.2AI score0.00364EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.2 views

PT-2025-24078 · WordPress · Wp Posts Carousel

Name of the Vulnerable Software and Affected Versions: WP Posts Carousel versions 1.3.12 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in WP Posts Carousel. Recommendations: For WP Posts Carousel versions 1.3.12 and earlier, upda...

8.8CVSS8.5AI score0.00364EPSS
Exploits0References6
Circl
Circl
added 2025/06/05 11:12 a.m.17 views

CVE-2025-5651

creationtimestamp| type| source ---|---|--- 2025-06-05 11:12:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu6snmli625 2025-06-05 11:49:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquatikfkhi2...

5.4CVSS7AI score0.00234EPSS
Exploits1References2
Circl
Circl
added 2025/06/05 1:27 a.m.30 views

CVE-2025-5622

creationtimestamp| type| source ---|---|--- 2025-06-05 01:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqt64rcwgl2e 2025-06-05 01:44:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114628220983430004...

10CVSS7AI score0.02009EPSS
Exploits1References2
OSV
OSV
added 2025/06/04 11:15 p.m.0 views

UBUNTU-CVE-2025-49007

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can caus...

8.7CVSS7AI score0.00483EPSS
Exploits0References5
Circl
Circl
added 2025/06/04 9:7 p.m.23 views

CVE-2025-5609

creationtimestamp| type| source ---|---|--- 2025-06-04 21:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsplhn5so2q 2025-06-04 21:18:00+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqsq5nk7dyk2...

9CVSS7AI score0.00759EPSS
Exploits1References2
Circl
Circl
added 2025/06/03 7:28 p.m.17 views

CVE-2025-48998

creationtimestamp| type| source ---|---|--- 2025-06-03 19:28:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpzkiekknm2 2025-06-03 21:14:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqq7inqymq2p...

8.8CVSS7.3AI score0.00429EPSS
Exploits1References2
Rows per page
Query Builder