Lucene search
+L

1148 matches found

CNNVD
CNNVD
•added 2025/09/26 12:00 a.m.•18 views

WordPress plugin Subscribe to Download security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•2 views

CVE-2025-60148: Missing Authorization

Missing Authorization vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe to Download: from n/a through = 2.0.9...

4.3CVSS5.9AI score0.00236EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•2 views

CVE-2025-60150: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue affects Subscribe to Download: from n/a through = 2.0.9...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/26 12:00 a.m.•15 views

WordPress plugin Subscribe To Unlock Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.3CVSS5.8AI score0.00236EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•12 views

PT-2025-39591

Name of the Vulnerable Software and Affected Versions wpshuffle Subscribe to Download versions through 2.0.9 Description An authorization issue exists in wpshuffle Subscribe to Download, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update...

4.3CVSS6.6AI score0.00236EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•17 views

PT-2025-39594

Name of the Vulnerable Software and Affected Versions wpshuffle Subscribe To Unlock versions through 1.1.5 Description An authorization issue exists in wpshuffle Subscribe To Unlock, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update wpshuff...

4.3CVSS6.6AI score0.00236EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•1 views

CVE-2025-60152: Missing Authorization

Missing Authorization vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe To Unlock: from n/a through = 1.1.5...

4.3CVSS5.9AI score0.00236EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/26 12:00 a.m.•21 views

WordPress plugin Subscribe To Unlock Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•14 views

PT-2025-39593

Name of the Vulnerable Software and Affected Versions wpshuffle Subscribe to Download versions through 2.0.9 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion...

7.5CVSS6.7AI score0.00477EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•2 views

CVE-2025-60153: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affects Subscribe To Unlock: from n/a through = 1.1.5...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•14 views

PT-2025-39595

Name of the Vulnerable Software and Affected Versions wpshuffle Subscribe To Unlock versions through 1.1.5 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion ...

7.5CVSS6.4AI score0.00477EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/09/24 6:32 p.m.•10 views

CVE-2025-58018

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.This issue affects Mail Subscribe List: from n/a through = 2.1.10...

6.5CVSS5.9AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•9 views

CVE-2025-58227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alexander Lueken Podlove Subscribe button podlove-subscribe-button allows Stored XSS.This issue affects Podlove Subscribe button: from n/a through = 1.3.11...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•9 views

CVE-2025-58227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alexander Lueken Podlove Subscribe button podlove-subscribe-button allows Stored XSS.This issue affects Podlove Subscribe button: from n/a through = 1.3.11...

6.5CVSS0.0021EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•11 views

CVE-2025-58018

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.This issue affects Mail Subscribe List: from n/a through = 2.1.10...

6.5CVSS0.00276EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/22 6:56 p.m.•9 views

WordPress Mail Subscribe List Plugin <= 2.1.10 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Mail Subscribe List versions = 2.1.10...

6.5CVSS6AI score0.00276EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/09/22 6:51 p.m.•11 views

WordPress Podlove Subscribe button Plugin <= 1.3.11 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Podlove Subscribe button versions = 1.3.11...

6.5CVSS6AI score0.0021EPSS
SaveExploits0Affected Software1
CVE
CVE
•added 2025/09/22 6:24 p.m.•17 views

CVE-2025-58018

CVE-2025-58018 is a stored cross-site scripting vulnerability described as an improper neutralization of input during web page generation in the WordPress plugin Mail Subscribe List . The issue affects the plugin versions from n/a up to 2.1.10 . The CVSS score in the referenced data is 6.5 (Mediu...

6.5CVSS5.9AI score0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:24 p.m.•20 views

CVE-2025-58018 WordPress Mail Subscribe List Plugin <= 2.1.10 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.This issue affects Mail Subscribe List: from n/a through = 2.1.10...

6.5CVSS0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:24 p.m.•2 views

CVE-2025-58018 WordPress Mail Subscribe List Plugin <= 2.1.10 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman Mail Subscribe List mail-subscribe-list allows Stored XSS.This issue affects Mail Subscribe List: from n/a through = 2.1.10...

6.5CVSS5.9AI score0.00276EPSS
SaveExploits0References1
Rows per page
Query Builder