Lucene search
+L

1275 matches found

Patchstack
Patchstack
added 2026/08/20 9:41 a.m.10 views

WordPress Divi theme 5.0-5.8.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ,.$n.,Sico.eX in WordPress Theme Divi versions 5.0-5.8.1...

5.4CVSS5AI score0.00162EPSS
SaveExploits1References1Affected Software1
Nuclei
Nuclei
added 2026/08/20 4:29 a.m.260 views

Skype for Business 2019 (SfB) - Blind Server-side Request Forgery

Skype Pre-Auth Server-side Request Forgery SSRF vulnerability id: CVE-2023-41763 info: name: Skype for Business 2019 SfB - Blind Server-side Request Forgery author: hateshape severity: medium description: | Skype Pre-Auth Server-side Request Forgery SSRF vulnerability impact: | Unauthenticated...

5.3CVSS6.9AI score0.90353EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/16 6:00 a.m.34 views

CVE-2026-13712 Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

0.00162EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:54 a.m.10 views

CVE-2009-4741

Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors...

10CVSS6.9AI score0.0197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:50 a.m.9 views

CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access...

3.3CVSS6.4AI score0.01164EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/07 6:05 a.m.20 views

CVE-2025-13898

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.1AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/06 6:30 a.m.7 views

EUVD-2025-201535

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS4.7AI score0.00224EPSS
SaveExploits0References6
NVD
NVD
added 2025/12/06 6:15 a.m.8 views

CVE-2025-13898

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS0.00224EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/06 5:49 a.m.4 views

CVE-2025-13898 Ultra Skype Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attribute

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnid' parameter of the ultraskype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS4.8AI score0.00224EPSS
SaveExploits0References5
CVE
CVE
added 2025/12/06 5:49 a.m.40 views

CVE-2025-13898

The Ultra Skype Button WordPress plugin (Ultra Skype Button, Plugin Slug: ultra-skype-button) is affected by CVE-2025-13898: a Stored Cross-Site Scripting vulnerability in the btn_id attribute of the [ultra_skype] shortcode. Affects all versions up to 1.0. Root cause: insufficient input sanitizat...

6.4CVSS4.8AI score0.00224EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/06 12:00 a.m.15 views

PT-2025-49351

The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn id' parameter of the ultra skype shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

6.4CVSS5.1AI score0.00224EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/06 12:00 a.m.7 views

WordPress plugin Ultra Skype Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00224EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/12/05 11:57 p.m.10 views

WordPress Ultra Skype Button plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'btnid' Shortcode Attribute vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Ultra Skype Button versions = 1.0...

6.4CVSS5.6AI score0.00224EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-10288

Malware in sbrugna...

5.9CVSS6AI score0.00734EPSS
SaveExploits3References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2008-0592

Malware in sbrugna...

4.3CVSS6.4AI score0.01207EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2005-2301

Malware in sbrugna...

2.1CVSS6.4AI score0.00483EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2008-0593

Malware in sbrugna...

4.3CVSS6.4AI score0.02063EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2008-1805

Malware in sbrugna...

9.3CVSS6.1AI score0.03898EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-11015

Malware in sbrugna...

6.5CVSS6.4AI score0.02887EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2007-5959

Malware in sbrugna...

6.8CVSS6.2AI score0.04421EPSS
SaveExploits1References9
Rows per page
Query Builder