Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/19 7:28 a.m.2 views

CVE-2026-1931

The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to...

7.2CVSS5.7AI score0.00057EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/18 7:37 a.m.4 views

WordPress Rent Fetch plugin <= 0.32.4 - Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter vulnerability discovered by WordFence in WordPress Plugin Rent Fetch versions = 0.32.6...

7.2CVSS5.5AI score0.00057EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2026/02/18 5:16 a.m.3 views

CVE-2026-1931

The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to...

7.2CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2026/02/18 4:35 a.m.19 views

CVE-2026-1931 Rent Fetch <= 0.32.4 - Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter

The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to...

7.2CVSS0.00057EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/02/18 4:35 a.m.2 views

CVE-2026-1931 Rent Fetch <= 0.32.4 - Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter

The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to...

7.2CVSS5.7AI score0.00057EPSS
Exploits0References5
CVE
CVE
added 2026/02/18 4:35 a.m.4 views

CVE-2026-1931

The affected software is the Rent Fetch plugin for WordPress. The CVE describes a Stored Cross‑Site Scripting flaw via the keyword parameter in all versions up to 0.32.4 caused by insufficient input sanitization and output escaping on user-supplied attributes. Unauthenticated attackers can inject...

7.2CVSS5.7AI score0.00057EPSS
Exploits0References5
Rows per page
Query Builder