Lucene search
+L

140 matches found

Vulnrichment
Vulnrichment
•added 2025/11/11 3:30 a.m.•6 views

CVE-2025-12880 Progress Bar Blocks for Gutenberg <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

The Progress Bar Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-leve...

5.4CVSS6.1AI score0.00163EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/11/11 1:18 a.m.•14 views

WordPress Progress Bar Blocks for Gutenberg plugin <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG vulnerability discovered by Peerapat Samatathanyakorn in WordPress Plugin Progress Bar Blocks for Gutenberg versions = 1.0.0...

5.4CVSS5.5AI score0.00163EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•18 views

PT-2025-46298

Name of the Vulnerable Software and Affected Versions Progress Bar Blocks for Gutenberg plugin for WordPress versions prior to 1.0.1 Description The Progress Bar Blocks for Gutenberg plugin for WordPress is susceptible to Stored Cross-Site Scripting through SVG File uploads. Insufficient input...

5.4CVSS5.3AI score0.00163EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•3 views

CVE-2025-12880: Improper Neutralization of Input During Web Page Generation

The Progress Bar Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-leve...

5.4CVSS6AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•13 views

WordPress plugin Progress Bar Blocks for Gutenberg 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS5.8AI score0.00163EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/10/31 7:02 p.m.•225 views

Exploit for HTTP Request Smuggling in Sap Content_Server

CVE-2022-22536 Batch Scanner This is a fast, socket-level bat...

10CVSS9.2AI score0.97945EPSS
SaveExploits8
RedhatCVE
RedhatCVE
•added 2025/10/23 9:13 a.m.•26 views

CVE-2025-11883

The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rprogress shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS6.1AI score0.00231EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 8:27 a.m.•18 views

EUVD-2025-35317

The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rprogress shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS6.1AI score0.00231EPSS
SaveExploits0References5
CVE
CVE
•added 2025/10/22 8:27 a.m.•39 views

CVE-2025-11883

The CVE refers to the WordPress plugin Responsive Progress Bar. The vulnerability is a Stored Cross-Site Scripting (XSS) via the rprogress shortcode in versions up to and including 1.0, caused by insufficient input sanitization and output escaping of user-supplied attributes. An attacker with con...

6.4CVSS6.1AI score0.00231EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/22 8:27 a.m.•30 views

CVE-2025-11883 Responsive Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rprogress shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS0.00231EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•1 views

CVE-2025-11883: Improper Neutralization of Input During Web Page Generation

The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rprogress shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS6.1AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•24 views

WordPress plugin Responsive Progress Bar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.6AI score0.00231EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/10/21 11:12 p.m.•16 views

WordPress Responsive Progress Bar plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Responsive Progress Bar versions = 1.0...

6.4CVSS5.8AI score0.00231EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/10/07 4:15 p.m.•10 views

CVE-2023-53620

In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in statusresync statusresync will calculate 'currresync - recoveryactive' to show user a progress bar like following: ============........ resync = 61.4% 'currresync' and 'recoveryactive' is updated in mddosyn...

5.5CVSS0.00152EPSS
SaveExploits0References3
OSV
OSV
•added 2025/10/07 4:15 p.m.•10 views

UBUNTU-CVE-2023-53620

In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in statusresync statusresync will calculate 'currresync - recoveryactive' to show user a progress bar like following: ============........ resync = 61.4% 'currresync' and 'recoveryactive' is updated in mddosyn...

5.5CVSS6AI score0.00152EPSS
SaveExploits0References6
CVE
CVE
•added 2025/10/07 3:19 p.m.•48 views

CVE-2023-53620

The issue CVE-2023-53620 affects the Linux kernel md (mdadm) status_resync logic. status_resync() reads curr_resync and recovery_active concurrently, which can cause an overflow in the expression curr_resync - recovery_active and lead to an extremely long loop that results in a soft lockup. The f...

5.5CVSS5.9AI score0.00152EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/07 3:19 p.m.•12 views

EUVD-2025-32796

In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in statusresync statusresync will calculate 'currresync - recoveryactive' to show user a progress bar like following: ============........ resync = 61.4% 'currresync' and 'recoveryactive' is updated in mddosyn...

5.9AI score0.00152EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-4607

Malware in sbrugna...

4.6CVSS6.4AI score0.00332EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-33788

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00405EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-45109

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder