Lucene search
+L

524 matches found

CNNVD
CNNVD
added 2025/05/07 12:00 a.m.7 views

WordPress plugin Logo Showcase 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.5AI score0.00247EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.15 views

WordPress plugin RS WP Book Showcase 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.5CVSS6.7AI score0.00199EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 4:00 p.m.13 views

CVE-2025-39431

Cross-Site Request Forgery CSRF vulnerability in Aaron Forgue Amazon Showcase WordPress Plugin amazon-showcase-wordpress-widget allows Stored XSS.This issue affects Amazon Showcase WordPress Plugin: from n/a through = 2.2...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.31 views

CVE-2025-39431

Cross-Site Request Forgery CSRF vulnerability in Aaron Forgue Amazon Showcase WordPress Plugin amazon-showcase-wordpress-widget allows Stored XSS.This issue affects Amazon Showcase WordPress Plugin: from n/a through = 2.2...

7.1CVSS0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.12 views

CVE-2025-23443

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Claire Ryan Author Showcase author-showcase allows Reflected XSS.This issue affects Author Showcase: from n/a through = 1.4.3...

7.1CVSS0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:48 p.m.7 views

CVE-2025-23443 WordPress Author Showcase plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Claire Ryan Author Showcase allows Reflected XSS. This issue affects Author Showcase: from n/a through 1.4.3...

7.1CVSS6.9AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:48 p.m.68 views

CVE-2025-23443

CVE-2025-23443 affects WordPress WordPress Author Showcase plugin versions

7.1CVSS5.9AI score0.00278EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:48 p.m.31 views

CVE-2025-23443 WordPress Author Showcase plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Claire Ryan Author Showcase author-showcase allows Reflected XSS.This issue affects Author Showcase: from n/a through = 1.4.3...

7.1CVSS0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:16 p.m.11 views

CVE-2025-39431 WordPress Amazon Showcase WordPress Plugin plugin <= 2.2 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aaron Forgue Amazon Showcase WordPress Plugin amazon-showcase-wordpress-widget allows Stored XSS.This issue affects Amazon Showcase WordPress Plugin: from n/a through = 2.2...

7.1CVSS8.6AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:16 p.m.32 views

CVE-2025-39431 WordPress Amazon Showcase WordPress Plugin plugin <= 2.2 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aaron Forgue Amazon Showcase WordPress Plugin amazon-showcase-wordpress-widget allows Stored XSS.This issue affects Amazon Showcase WordPress Plugin: from n/a through = 2.2...

7.1CVSS0.00143EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:16 p.m.86 views

CVE-2025-39431

CVE-2025-39431 : Cross-Site Request Forgery (CSRF) leading to Stored XSS in the Amazon Showcase WordPress Plugin. Affected: Amazon Showcase WordPress Plugin versions n/a through 2.2. Root cause/impact are described in multiple sources (NVD, CVE records, Red Hat) as CSRF enabling XSS; exploitation...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.7 views

WordPress plugin Amazon Showcase WordPress Plugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:00 a.m.17 views

PT-2025-17021 · Unknown · Claire Ryan Author Showcase

Name of the Vulnerable Software and Affected Versions: Claire Ryan Author Showcase versions 1.4.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables an attacker ...

7.1CVSS6.1AI score0.00278EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.9 views

WordPress plugin Author Showcase 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.9AI score0.00278EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:00 a.m.11 views

PT-2025-16998 · WordPress · Amazon Showcase Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Amazon Showcase WordPress Plugin versions n/a through 2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS7.3AI score0.00143EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/11 6:06 p.m.22 views

CVE-2025-32499

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Logo Showcase Ultimate logo-showcase-ultimate allows PHP Local File Inclusion.This issue affects Logo Showcase Ultimate: from n/a through = 1.4.4...

6.5CVSS7.2AI score0.0071EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/11 12:00 a.m.10 views

WordPress plugin Testimonial Slider And Showcase Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

8.1CVSS8.3AI score0.00889EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/09 5:15 p.m.14 views

CVE-2025-32499

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Logo Showcase Ultimate logo-showcase-ultimate allows PHP Local File Inclusion.This issue affects Logo Showcase Ultimate: from n/a through = 1.4.4...

6.5CVSS0.0071EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/09 4:09 p.m.59 views

CVE-2025-32499

CVE-2025-32499 corresponds to a Local File Inclusion in Logo Showcase Ultimate (Logo Carousel/Slider/Grid) via authenticated access (Contributor+). Affected versions are Logo Showcase Ultimate up to 1.4.4. The vulnerability stems from improper handling of Include/Require statements, enabling an a...

6.5CVSS7.2AI score0.0071EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 4:09 p.m.24 views

CVE-2025-32499 WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Logo Showcase Ultimate logo-showcase-ultimate allows PHP Local File Inclusion.This issue affects Logo Showcase Ultimate: from n/a through = 1.4.4...

6.5CVSS0.0071EPSS
SaveExploits0References1
Rows per page
Query Builder