Lucene search
+L

1135337 matches found

CVE
CVE
added 2026/07/02 11:14 a.m.24 views

CVE-2026-27402

CVE-2026-27402 refers to an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress theme set for Kids Life | Children School, affected in versions

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/02 11:14 a.m.43 views

CVE-2025-69156 WordPress Kids Zone - Children WordPress Theme theme <= 5.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Kids Zone - Children WordPress Theme = 5.4 versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/02 11:14 a.m.26 views

CVE-2025-69156

CVE-2025-69156 details unauthenticated Cross Site Scripting in the WordPress Kids Zone – Children WordPress Theme, affected Versions

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/02 11:14 a.m.13 views

EUVD-2025-210407

Unauthenticated Cross Site Scripting XSS in Fitness Zone WordPress Theme = 5.7 versions...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/02 11:14 a.m.40 views

CVE-2025-69155 WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fitness Zone WordPress Theme = 5.7 versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/02 11:14 a.m.19 views

CVE-2025-69155

CVE-2025-69155 affects the Fitness Zone WordPress Theme up to version 5.7. It is described as an unauthenticated Cross Site Scripting (XSS) vulnerability in the theme, with CVSS v3.1 base score 7.1 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: NONE; User interaction...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/02 11:14 a.m.40 views

CVE-2025-69154 WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SpaLab | Beauty Salon WordPress Theme = 6.7 versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/02 11:14 a.m.28 views

CVE-2025-69154

CVE-2025-69154 affects the SpaLab | Beauty Salon WordPress Theme up to version 6.7. It is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the theme. The CVSS v3.1 base score is 7.1 (HIGH) with network attack, no privileges required, user interaction required, and low impacts to con...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/02 11:14 a.m.42 views

CVE-2025-69153 WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Trendy Travel = 6.7 versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/02 11:14 a.m.22 views

CVE-2025-69153

Mode C: CVE-2025-69153 affects the WordPress Trendy Travel theme (≤ 6.7). The issue is an unauthenticated reflected XSS in the Trendy Travel theme, enabling injection of script via user interaction. Impact is listed as low for confidentiality, integrity, and availability, with a CVSS ~7.1 (NETWOR...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/02 11:14 a.m.15 views

CVE-2025-69153

Unauthenticated Cross Site Scripting XSS in Trendy Travel = 6.7 versions...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/02 11:14 a.m.25 views

CVE-2025-69152

CVE-2025-69152 affects the Artale | Wedding Photography WordPress theme (versions

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/02 11:14 a.m.10 views

CVE-2025-69152

Unauthenticated Cross Site Scripting XSS in Artale | Wedding Photography WordPress = 2.2.2 versions...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/02 11:14 a.m.42 views

CVE-2025-69152 WordPress Artale | Wedding Photography WordPress theme <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Artale | Wedding Photography WordPress = 2.2.2 versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/02 10:16 a.m.11 views

CVE-2026-13252

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'aspectRatio' Attribute in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. Th...

6.4CVSS0.00195EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/02 10:16 a.m.16 views

CVE-2026-10104

The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customthumbnail Parameter in all versions up to, and including, 1.5.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

4.4CVSS0.00264EPSS
SaveExploits1References8
Patchstack
Patchstack
added 2026/07/02 9:20 a.m.11 views

WordPress Structured Content plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Structured Content versions = 1.7.0...

6.5CVSS5.8AI score0.00135EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/02 9:20 a.m.13 views

WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jitlada in WordPress Plugin Simple URLs versions = 151...

5.9CVSS5.8AI score0.00144EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/02 9:19 a.m.11 views

WordPress SEOWP theme <= 3.12.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by adhikara13 in WordPress Theme SEOWP versions = 3.12.2...

7.1CVSS5.8AI score0.00094EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/02 8:53 a.m.10 views

WordPress Mosaic Gallery &#8211; Advanced Gallery plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Mosaic Gallery Advanced Gallery versions = 1.2.0...

6.5CVSS5.8AI score0.00135EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder