Lucene search
+L

15651 matches found

Vulnrichment
Vulnrichment
•added 2025/09/05 1:45 p.m.•11 views

CVE-2025-58882 WordPress Simple Text Slider Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affects Simple Text Slider: from n/a through = 1.0.5...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/05 1:45 p.m.•30 views

CVE-2025-58882

CVE-2025-58882 affects WordPress plugin Simple Text Slider (versions

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/05 1:45 p.m.•10 views

CVE-2025-58881 WordPress New Simple Gallery Plugin <= 8.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus New Simple Gallery allows Blind SQL Injection. This issue affects New Simple Gallery: from n/a through 8.0...

8.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/05 1:45 p.m.•25 views

CVE-2025-58881

CVE-2025-58881 is a SQL injection in the WordPress plugin New Simple Gallery (versions through 8.0). Root cause: improper neutralization of special elements in SQL commands, enabling blind SQL injection. Affected product/version: WordPress plugin New Simple Gallery

8.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/05 1:45 p.m.•30 views

CVE-2025-58881 WordPress New Simple Gallery Plugin <= 8.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through = 8.0...

8.5CVSS0.00267EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/05 1:45 p.m.•13 views

CVE-2025-58872 WordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through = 1.3...

6.5CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/05 1:45 p.m.•6 views

CVE-2025-58810 WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jimmywb Simple Link List Widget simple-link-list-widget allows Stored XSS.This issue affects Simple Link List Widget: from n/a through = 0.3.2...

5.9CVSS5.8AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/05 1:45 p.m.•20 views

CVE-2025-58810 WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jimmywb Simple Link List Widget simple-link-list-widget allows Stored XSS.This issue affects Simple Link List Widget: from n/a through = 0.3.2...

5.9CVSS0.00225EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/05 1:25 p.m.•13 views

WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Que Thanh Tuan Blue Rock in WordPress Plugin Simple Link List Widget versions = 0.3.2...

5.9CVSS6AI score0.00225EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•24 views

PT-2025-36219

Name of the Vulnerable Software and Affected Versions: w1zzard Simple Text Slider versions through 1.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update w1zzard Simpl...

6.5CVSS5.5AI score0.00169EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•17 views

WordPress plugin Simple Text Slider has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.5AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•18 views

WordPress plugin Simple Price Calculator has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS5.7AI score0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•12 views

WordPress plugin Simple Link List Widget has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.2AI score0.00225EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•16 views

PT-2025-36218

Name of the Vulnerable Software and Affected Versions: gopiplus New Simple Gallery versions through 8.0 Description: The software contains an SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for blind SQL injection. Recommendations: Version...

8.5CVSS7.3AI score0.00267EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•8 views

CVE-2025-58872: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through = 1.3...

6.5CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•5 views

CVE-2025-58881: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through = 8.0...

8.5CVSS5.9AI score0.00267EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•6 views

CVE-2025-58882: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affects Simple Text Slider: from n/a through = 1.0.5...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•4 views

CVE-2025-58810: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jimmywb Simple Link List Widget simple-link-list-widget allows Stored XSS.This issue affects Simple Link List Widget: from n/a through = 0.3.2...

5.9CVSS5.8AI score0.00225EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•21 views

WordPress Plugin New Simple Gallery Vulnerability Due to SQL Injection

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/03 3:15 p.m.•15 views

CVE-2025-58630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rbaer Simple Matomo Tracking Code simple-matomo-tracking-code allows Stored XSS.This issue affects Simple Matomo Tracking Code: from n/a through = 1.1.0...

5.9CVSS0.00193EPSS
SaveExploits0References1
Rows per page
Query Builder