Lucene search
+L

1002 matches found

CNNVD
CNNVD
added 2025/11/18 12:0 a.m.5 views

WordPress plugin Category and Product Woocommerce Tabs 安全漏洞

WordPress Category and Product Woocommerce Tabs plugin is a plugin for WordPress websites, the main function is to add custom tabs Tabs to WooCommerce product pages to organize and display product information, categories and other content. A file inclusion vulnerability exists in the WordPress...

8.8CVSS7AI score0.00324EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/11/17 11:14 p.m.9 views

WordPress Category and Product Woocommerce Tabs plugin <= 1.0 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Category and Product Woocommerce Tabs versions = 1.0...

8.8CVSS7.1AI score0.00324EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/12 3:46 a.m.11 views

CVE-2025-11822

The WP Bootstrap Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bootstraptab' shortcode in all versions up to, and including, 1.0.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5AI score0.00265EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/11 6:30 a.m.5 views

EUVD-2025-60976

The WP Bootstrap Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bootstraptab' shortcode in all versions up to, and including, 1.0.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS4.7AI score0.00265EPSS
Exploits0References4
NVD
NVD
added 2025/11/11 4:15 a.m.3 views

CVE-2025-11822

The WP Bootstrap Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bootstraptab' shortcode in all versions up to, and including, 1.0.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00265EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/11 3:30 a.m.9 views

CVE-2025-11822 WP Bootstrap Tabs <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The WP Bootstrap Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bootstraptab' shortcode in all versions up to, and including, 1.0.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00265EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.7 views

PT-2025-46252

Name of the Vulnerable Software and Affected Versions WP Bootstrap Tabs versions prior to 1.0.5 Description The WP Bootstrap Tabs plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'bootstrap tab' shortcode. Insufficient input sanitization and output escaping of...

6.4CVSS5.2AI score0.00265EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.5 views

WordPress plugin WP Bootstrap Tabs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-sit...

6.4CVSS5.8AI score0.00265EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/10 10:32 p.m.8 views

WordPress WP Bootstrap Tabs plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin WP Bootstrap Tabs versions = 1.0.4...

6.4CVSS5.5AI score0.00265EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.8 views

CVE-2025-62060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...

6.5CVSS6.4AI score0.00164EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.6 views

EUVD-2025-35374

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...

5.9AI score0.00164EPSS
Exploits0References2
NVD
NVD
added 2025/10/22 3:16 p.m.17 views

CVE-2025-62060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...

6.5CVSS0.00164EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 12:41 p.m.5 views

CVE-2025-11720

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...

8.1CVSS5.7AI score0.0025EPSS
Exploits0References1
OSV
OSV
added 2025/10/14 1:15 p.m.6 views

UBUNTU-CVE-2025-11720

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...

8.1CVSS5.7AI score0.0025EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/10/14 12:27 p.m.2 views

CVE-2025-11720 Spoofing risk in Android custom tabs

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...

5.7AI score0.0025EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-14123

Malware in sbrugna...

6.5CVSS7.9AI score0.01328EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2013-4285

Malware in sbrugna...

5CVSS6.4AI score0.01513EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-1254

Malware in sbrugna...

5CVSS6.4AI score0.01487EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-17091

Malware in sbrugna...

5.4CVSS5.5AI score0.00595EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-0105

Malware in sbrugna...

7.5CVSS7.4AI score0.00778EPSS
Exploits0References5
Rows per page
Query Builder