CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2026/05/27 7:16 a.m.•32 views

CVE-2026-8875

The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...

6.4CVSS0.00321EPSS

SaveExploits0References3

attackerkb•added 2026/05/27 5:31 a.m.•15 views

CVE-2026-8875

6AI score0.00321EPSS

SaveExploits0References4

CVE•added 2026/05/27 5:31 a.m.•50 views

CVE-2026-8875

Affected software : WordPress plugin Easy Prism Syntax Highlighter (versions ≤ 1.0.2). Vulnerability : Stored Cross-Site Scripting via the plugin’s 'code' and 'c' shortcode attributes due to insufficient input sanitization and output escaping in shortcode(), which concatenates the first positiona...

6.4CVSS6.1AI score0.00321EPSS

SaveExploits0References3

Vulnrichment•added 2026/05/27 5:31 a.m.•16 views

CVE-2026-8875 Easy Prism Syntax Highlighter <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

6.4CVSS6.1AI score0.00321EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/05/27 12:00 a.m.•3 views

CVE-2026-8875: Improper Neutralization of Input During Web Page Generation

6.4CVSS6AI score0.00321EPSS

SaveExploits0References2

Patchstack•added 2026/05/26 5:26 p.m.•18 views

WordPress Easy Prism Syntax Highlighter plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Easy Prism Syntax Highlighter versions = 1.0.2...

6.4CVSS5.8AI score0.00321EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by