Lucene search
+L

15442 matches found

NVD
NVD
•added 2025/10/27 2:15 a.m.•23 views

CVE-2025-62985

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in llamaman Simple Pull Quote simple-pull-quote allows Stored XSS.This issue affects Simple Pull Quote: from n/a through = 1.6.3...

6.5CVSS0.00165EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/27 2:15 a.m.•26 views

CVE-2025-62958

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

4.3CVSS0.0014EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/10/27 2:15 a.m.•14 views

CVE-2025-62882

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.13.0...

4.3CVSS5.8AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/27 2:15 a.m.•13 views

CVE-2025-62882

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.13.0...

4.3CVSS0.00236EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/27 1:34 a.m.•10 views

CVE-2025-62985 WordPress Simple Pull Quote plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in llamaman Simple Pull Quote simple-pull-quote allows Stored XSS.This issue affects Simple Pull Quote: from n/a through = 1.6.3...

6.5CVSS5.8AI score0.00165EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/27 1:34 a.m.•38 views

CVE-2025-62985

CVE-2025-62985 is a stored XSS in the WordPress plugin Simple Pull Quote (versions

6.5CVSS5.8AI score0.00165EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/27 1:34 a.m.•26 views

CVE-2025-62985 WordPress Simple Pull Quote plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in llamaman Simple Pull Quote simple-pull-quote allows Stored XSS.This issue affects Simple Pull Quote: from n/a through = 1.6.3...

6.5CVSS0.00165EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/27 1:34 a.m.•19 views

EUVD-2025-35960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in llamaman Simple Pull Quote simple-pull-quote allows Stored XSS.This issue affects Simple Pull Quote: from n/a through = 1.6.3...

6.5CVSS5.5AI score0.00165EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/27 1:34 a.m.•43 views

CVE-2025-62958 WordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

4.3CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/27 1:34 a.m.•14 views

CVE-2025-62958 WordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/27 1:34 a.m.•49 views

CVE-2025-62958

CVE-2025-62958 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Simple Content Templates for Blog Posts & Pages” (simple-post-template) by Clifton Griffin. The issue affects versions from n/a up to and including 2.2.61. Public sources in the connected documents...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/27 1:33 a.m.•6 views

CVE-2025-62882 WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.13.0...

4.3CVSS6AI score0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/27 1:33 a.m.•25 views

CVE-2025-62882 WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.13.0...

4.3CVSS0.00236EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/27 1:33 a.m.•29 views

CVE-2025-62882

CVE-2025-62882 affects the WordPress plugin Seriously Simple Podcasting (≤ 3.13.0). The root cause is an incorrectly configured access control mechanism that allows missing authorization, enabling a broken access control vulnerability. Reported across multiple sources (Red Hat, EU ENISA EUVD, CVE...

4.3CVSS6AI score0.00236EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•20 views

WordPress plugin Simple Pull Quote 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS5.8AI score0.00165EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•16 views

PT-2025-43762

Name of the Vulnerable Software and Affected Versions Seriously Simple Podcasting versions through 3.13.0 Description An authorization issue exists in Craig Hewitt Seriously Simple Podcasting. The issue involves incorrectly configured access control security levels, potentially allowing...

4.3CVSS6.5AI score0.00236EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•8 views

CVE-2025-12298: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in code-projects Simple Food Ordering System 1.0. This affects an unknown part of the file /editcategory.php. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and...

6.1CVSS4AI score0.00389EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•16 views

WordPress plugin Seriously Simple Podcasting 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

4.3CVSS6.6AI score0.00236EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•2 views

CVE-2025-62882: Missing Authorization

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.13.0...

4.3CVSS6AI score0.00236EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•5 views

CVE-2025-62985: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in llamaman Simple Pull Quote simple-pull-quote allows Stored XSS.This issue affects Simple Pull Quote: from n/a through = 1.6.3...

6.5CVSS5.8AI score0.00165EPSS
SaveExploits0References2
Rows per page
Query Builder