Lucene search
+L

42 matches found

attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•17 views

CVE-2026-57707

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Directory Pro: from n/a through = 15.9.4...

9.3CVSS6.1AI score0.004EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/13 8:41 a.m.•13 views

CVE-2026-57707 WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Directory Pro: from n/a through = 15.9.4...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/13 8:41 a.m.•31 views

CVE-2026-57707

The CVE-2026-57707 entry concerns WordPress Plugin Simple Business Directory Pro (versions up to 15.9.4) affected by an SQL Injection vulnerability. Affected component is the Simple Business Directory Pro plugin; root cause indicated as improper neutralization of special elements used in SQL comm...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•19 views

EUVD-2026-43363

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Directory Pro: from n/a through = 15.9.4...

9.3CVSS6.1AI score0.004EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/13 8:41 a.m.•53 views

CVE-2026-57707 WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Directory Pro: from n/a through = 15.9.4...

9.3CVSS0.004EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•1 views

CVE-2026-57707: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Directory Pro: from n/a through = 15.9.4...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2026/04/23 12:00 a.m.•11 views

VulnCheck KEV: CVE-2025-31918

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

9.8CVSS5.2AI score0.00494EPSS
SaveIn wildExploits0References3
NVD
NVD
•added 2025/10/22 9:15 a.m.•15 views

CVE-2025-11870

The Simple Business Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'simplebusinessdata' shortcode attributes in all versions up to, and including, 1.0.1. This is due to the plugin not properly sanitizing user input or escaping output when embedding the type attribute...

6.4CVSS0.00193EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/22 8:27 a.m.•6 views

CVE-2025-11870 Simple Business Data <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Simple Business Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'simplebusinessdata' shortcode attributes in all versions up to, and including, 1.0.1. This is due to the plugin not properly sanitizing user input or escaping output when embedding the type attribute...

6.4CVSS4.7AI score0.00193EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/22 8:27 a.m.•33 views

CVE-2025-11870

CVE-2025-11870: The Simple Business Data WordPress plugin (simple-business-data) is vulnerable to stored XSS in all versions up to 1.0.1 via the simple_business_data shortcode attributes, where unsanitized input is embedded into the class attribute of rendered HTML. Exploitation requires contribu...

6.4CVSS4.7AI score0.00193EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/22 8:27 a.m.•32 views

CVE-2025-11870 Simple Business Data <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Simple Business Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'simplebusinessdata' shortcode attributes in all versions up to, and including, 1.0.1. This is due to the plugin not properly sanitizing user input or escaping output when embedding the type attribute...

6.4CVSS0.00193EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/22 8:27 a.m.•12 views

EUVD-2025-35332

The Simple Business Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'simplebusinessdata' shortcode attributes in all versions up to, and including, 1.0.1. This is due to the plugin not properly sanitizing user input or escaping output when embedding the type attribute...

6.4CVSS4.6AI score0.00193EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•11 views

WordPress plugin Simple Business Data 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00193EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-11870: Improper Neutralization of Input During Web Page Generation

The Simple Business Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'simplebusinessdata' shortcode attributes in all versions up to, and including, 1.0.1. This is due to the plugin not properly sanitizing user input or escaping output when embedding the type attribute...

6.4CVSS6AI score0.00193EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/21 11:53 p.m.•14 views

WordPress Simple Business Data plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Simple Business Data versions = 1.0.1...

6.4CVSS5.7AI score0.00193EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-27814

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00494EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-45435

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00255EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•16 views

CVE-2025-48162

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Reflected XSS.This issue affects Simple Business Directory Pro: from n/a through = 15.5.1...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 8:15 a.m.•15 views

CVE-2025-53580

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

9.8CVSS0.00367EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/08/20 8:03 a.m.•26 views

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

9.8CVSS0.00367EPSS
SaveExploits1References1
Rows per page
Query Builder