Lucene search
+L

1186 matches found

Vulnrichment
Vulnrichment
added 2026/01/07 9:21 a.m.6 views

CVE-2025-15058 Responsive Pricing Table <= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency'

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tablecurrency' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS4.7AI score0.00243EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/07 9:21 a.m.34 views

CVE-2025-15058 Responsive Pricing Table <= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency'

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tablecurrency' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00243EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/07 9:20 a.m.29 views

CVE-2025-13418

CVE-2025-13418 affects the WordPress plugin Responsive Pricing Table (versions

6.4CVSS4.7AI score0.00598EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/07 9:20 a.m.32 views

CVE-2025-13418 Responsive Pricing Table <= 5.1.12 - Authenticated (Author+) Stored Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

6.4CVSS0.00598EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/07 9:14 a.m.17 views

CVE-2024-2960

The SVS Pricing Tables plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the deletePricingTable function. This makes it possible for unauthenticated attackers to delete pricing tabl...

4.3CVSS6.4AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:14 a.m.12 views

CVE-2024-2959

The SVS Pricing Tables plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the savePricingTable function. This makes it possible for unauthenticated attackers to create and edit prici...

4.3CVSS6.4AI score0.00211EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.11 views

WordPress plugin Responsive Pricing Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00598EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.10 views

PT-2026-1601

Name of the Vulnerable Software and Affected Versions Responsive Pricing Table plugin for WordPress versions prior to 5.1.13 Description The software is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. An authenticated attacker with Author-lev...

6.4CVSS5.5AI score0.00598EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.7 views

WordPress plugin Responsive Pricing Table 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.4CVSS5.8AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.30 views

PT-2026-1640

Name of the Vulnerable Software and Affected Versions Responsive Pricing Table plugin for WordPress versions up to and including 5.1.12 Description The software contains a flaw due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level...

6.4CVSS6.4AI score0.00243EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/01/06 11:20 p.m.11 views

WordPress Responsive Pricing Table plugin <= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'tablecurrency' vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Responsive Pricing Table versions = 5.1.12...

6.4CVSS5.6AI score0.00243EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/01/06 11:19 p.m.10 views

WordPress Responsive Pricing Table plugin <= 5.1.12 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin Responsive Pricing Table versions = 5.1.12...

6.4CVSS5.5AI score0.00598EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/31 2:13 a.m.19 views

CVE-2025-15214

A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function savepricing of the file adminclass.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remote. The exploit has been made public and...

4.8CVSS3AI score0.00273EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/30 2:16 a.m.12 views

CVE-2025-15214

A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function savepricing of the file adminclass.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remote. The exploit has been made public and...

4.8CVSS0.00273EPSS
SaveExploits1References6
CVE
CVE
added 2025/12/30 1:32 a.m.22 views

CVE-2025-15214

CVE-2025-15214 affects Campcodes Park Ticketing System 1.0. The vulnerable component is the save_pricing function in admin_class.php, where manipulating the Name/ride argument enables cross-site scripting. The issue is exploitable remotely and exploitation has been publicly disclosed. Multiple so...

4.8CVSS2.9AI score0.00273EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2025/12/30 1:32 a.m.45 views

CVE-2025-15214 Campcodes Park Ticketing System admin_class.php save_pricing cross site scripting

A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function savepricing of the file adminclass.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remote. The exploit has been made public and...

4.8CVSS0.00273EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/12/30 1:32 a.m.5 views

CVE-2025-15214 Campcodes Park Ticketing System admin_class.php save_pricing cross site scripting

A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function savepricing of the file adminclass.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remote. The exploit has been made public and...

4.8CVSS2.9AI score0.00273EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/12/30 1:32 a.m.24 views

EUVD-2025-205676

A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function savepricing of the file adminclass.php. The manipulation of the argument Name results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could...

4.8CVSS5.1AI score0.00273EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.9 views

PT-2025-53833

Name of the Vulnerable Software and Affected Versions Campcodes Park Ticketing System version 1.0 Description A security issue exists in Campcodes Park Ticketing System version 1.0. The save pricing function within the admin class.php file is susceptible to cross-site scripting XSS due to...

4.8CVSS3.2AI score0.00273EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2025/12/14 8:45 a.m.14 views

CVE-2025-8780

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Hero Header and Pricing Table widgets in all versions up to, and including, 3.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes i...

6.4CVSS5AI score0.00218EPSS
SaveExploits0References1
Rows per page
Query Builder