Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2015-9303

Malware in sbrugna...

7.5CVSS7.5AI score0.06514EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2015-9304

Malware in sbrugna...

7.5CVSS7.5AI score0.06017EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:7 a.m.12 views

CVE-2015-9464

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

7.5CVSS7.1AI score0.06017EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:7 a.m.4 views

CVE-2015-9463

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

7.5CVSS7.1AI score0.06514EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/03/15 4:45 a.m.10 views

CVE-2024-13862

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6AI score0.00148EPSS
Exploits1References1
NVD
NVD
added 2025/03/11 6:15 a.m.7 views

CVE-2024-13862

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00148EPSS
Exploits1References1
CVE
CVE
added 2025/03/11 6:0 a.m.41 views

CVE-2024-13862

CVE-2024-13862 affects the WordPress plugin S3Bubble Media Streaming (AWS|Elementor|YouTube|Vimeo Functionality) up to version 8.0. The vulnerability is a Reflected XSS caused by insufficient sanitisation/escaping of a parameter output on the page. Impact is described as potentially targeting hig...

7.1CVSS6.2AI score0.00148EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/03/11 6:0 a.m.14 views

CVE-2024-13862 S3Bubble Media Streaming <= 8.0 - Reflected XSS

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00148EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/16 12:0 a.m.3 views

WordPress s3bubble-amazon-s3-html-5-video-with-adverts plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. s3bubble-amazon-s3-html-5-video-with-adverts is a video player plugin for streaming Amazon S3 used in it. A path traversal vulnerabili...

7.5CVSS6.7AI score0.06017EPSS
Exploits1References1
Prion
Prion
added 2019/10/10 4:15 p.m.13 views

Directory traversal

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

5CVSS7.2AI score0.06017EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder