CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2026/06/15 12:00 a.m.•7 views

CVE-2026-39540: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Shipment Tracker for Woocommerce = 1.5.3.2 versions...

6.5CVSS5.7AI score0.00224EPSS

SaveExploits0References2

Positive Technologies•added 2026/04/27 12:00 a.m.•23 views

PT-2026-35640

Name of the Vulnerable Software and Affected Versions Shipment Tracker for Woocommerce versions prior to 1.5.3.3 Description A Cross Site Scripting XSS issue exists that allows users with the Subscriber role to execute malicious scripts in the context of the application. Recommendations Update to...

6.5CVSS5.3AI score0.00224EPSS

SaveExploits0References3

RedhatCVE•added 2025/04/25 4:28 p.m.•16 views

CVE-2025-24586

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bitsstech Shipment Tracker for Woocommerce shipment-tracker-for-woocommerce allows Reflected XSS.This issue affects Shipment Tracker for Woocommerce: from n/a through = 1.4.23...

7.1CVSS5.9AI score0.00288EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/04/17 12:00 a.m.•2 views

CVE-2025-24586: Improper Neutralization of Input During Web Page Generation

7.1CVSS5.8AI score0.00288EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by