Lucene search
K

26 matches found

RedhatCVE
RedhatCVE
added 2026/01/01 9:12 a.m.4 views

CVE-2025-63000

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Stored XSS.This issue affects Sermon Manager: from n/a through = 2.30.0...

6.5CVSS5.9AI score0.00024EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 9:15 a.m.2 views

CVE-2025-63000

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Stored XSS.This issue affects Sermon Manager: from n/a through = 2.30.0...

6.5CVSS0.00024EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 8:50 a.m.8 views

CVE-2025-63000

CVE-2025-63000 is a stored cross-site scripting vulnerability in the WordPress plugin Sermon Manager (Sermon Manager

6.5CVSS5.9AI score0.00024EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/31 8:50 a.m.23 views

CVE-2025-63000 WordPress Sermon Manager plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Stored XSS.This issue affects Sermon Manager: from n/a through = 2.30.0...

6.5CVSS0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 8:50 a.m.2 views

EUVD-2025-205913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP for church Sermon Manager allows Stored XSS.This issue affects Sermon Manager: from n/a through 2.30.0...

6.5CVSS5.5AI score0.00024EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/31 8:50 a.m.3 views

CVE-2025-63000 WordPress Sermon Manager plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Stored XSS.This issue affects Sermon Manager: from n/a through = 2.30.0...

6.5CVSS5.9AI score0.00024EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 8:49 a.m.2 views

WordPress Sermon Manager plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Sermon Manager versions = 2.30.0...

6.5CVSS5.8AI score0.00024EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.3 views

WordPress Sermon Manager plugin <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Sermon Manager versions = 2.30.0...

6.4CVSS5.9AI score0.00031EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.3 views

WordPress plugin Sermon Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

6.5CVSS5.8AI score0.00024EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.4 views

PT-2025-54304

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP for church Sermon Manager allows Stored XSS.This issue affects Sermon Manager: from n/a through 2.30.0...

6.5CVSS6AI score0.00024EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/19 5:22 p.m.3 views

CVE-2025-63002

Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through = 2.30.0...

5.3CVSS5.9AI score0.00038EPSS
Exploits0References1
NVD
NVD
added 2025/12/18 5:15 p.m.1 views

CVE-2025-63002

Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through = 2.30.0...

5.3CVSS0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 4:46 p.m.1 views

CVE-2025-63002 WordPress Sermon Manager plugin <= 2.30.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpforchurch Sermon Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through 2.30.0...

5.3CVSS6.6AI score0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 4:46 p.m.24 views

CVE-2025-63002 WordPress Sermon Manager plugin <= 2.30.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through = 2.30.0...

5.3CVSS0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 4:46 p.m.4 views

CVE-2025-63002

CVE-2025-63002 concerns the WordPress plugin Sermon Manager (WordPress) versions

5.3CVSS5.9AI score0.00038EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin Sermon Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00038EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.1 views

PT-2025-52273

Missing Authorization vulnerability in wpforchurch Sermon Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through 2.30.0...

5.3CVSS7AI score0.00038EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/06 5:54 a.m.1 views

CVE-2025-12368

The Sermon Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sermon-views shortcode in all versions up to, and including, 2.30.0. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticate...

6.4CVSS5AI score0.00031EPSS
Exploits0References1
NVD
NVD
added 2025/12/05 6:16 a.m.1 views

CVE-2025-12368

The Sermon Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sermon-views shortcode in all versions up to, and including, 2.30.0. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticate...

6.4CVSS0.00031EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/05 5:31 a.m.1 views

CVE-2025-12368 Sermon Manager <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Sermon Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sermon-views shortcode in all versions up to, and including, 2.30.0. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticate...

6.4CVSS4.7AI score0.00031EPSS
Exploits0References3
Rows per page
Query Builder