Lucene search
+L

1240 matches found

CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•15 views

WordPress plugin Multi-Column Taxonomy List 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

6.5CVSS6.6AI score0.00269EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•4 views

CVE-2025-46502: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bas Matthee LSD Custom taxonomy and category meta custom-taxonomy-category-and-term-fields allows Cross Site Request Forgery.This issue affects LSD Custom taxonomy and category meta: from n/a throu...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•4 views

CVE-2025-46491: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew Muro Multi-Column Taxonomy List multi-column-taxonomy-list allows Stored XSS.This issue affects Multi-Column Taxonomy List: from n/a through = 1.5...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•18 views

CVE-2025-24670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dhanendran Rajagopal Term Taxonomy Converter term-taxonomy-converter allows Reflected XSS.This issue affects Term Taxonomy Converter: from n/a through = 1.2...

7.1CVSS0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/17 3:48 p.m.•37 views

CVE-2025-24670 WordPress Term Taxonomy Converter Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dhanendran Rajagopal Term Taxonomy Converter term-taxonomy-converter allows Reflected XSS.This issue affects Term Taxonomy Converter: from n/a through = 1.2...

7.1CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:48 p.m.•72 views

CVE-2025-24670

CVE-2025-24670 concerns the WordPress plugin Term Taxonomy Converter (versions ≤ 1.2). The issue is an improper neutralization of input during web page generation, enabling reflected XSS. Multiple sources (NVD, Red Hat, CVE listing, CVE record, Patchstack, PT Security) consistently describe Refle...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:48 p.m.•11 views

CVE-2025-24670 WordPress Term Taxonomy Converter Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dhanendran Rajagopal Term Taxonomy Converter term-taxonomy-converter allows Reflected XSS.This issue affects Term Taxonomy Converter: from n/a through = 1.2...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•19 views

PT-2025-17045 · Unknown · Dhanendran Rajagopal Term Taxonomy Converter

Name of the Vulnerable Software and Affected Versions: Dhanendran Rajagopal Term Taxonomy Converter versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means...

7.1CVSS6AI score0.00288EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•15 views

WordPress plugin Term Taxonomy Converter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•4 views

CVE-2025-24670: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dhanendran Rajagopal Term Taxonomy Converter term-taxonomy-converter allows Reflected XSS.This issue affects Term Taxonomy Converter: from n/a through = 1.2...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2025/04/08 7:00 a.m.•42 views

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: April 8, 2025 (KB5002682)

None None...

7.8CVSS7AI score0.00823EPSS
SaveExploits0
Schneier on Security
Schneier on Security
•added 2025/03/27 11:00 a.m.•14 views

A Taxonomy of Adversarial Machine Learning Attacks and Mitigations

NIST just released a comprehensive taxonomy of adversarial machine learning attacks and countermeasures...

7.3AI score
SaveExploits0
OSV
OSV
•added 2025/02/25 7:15 a.m.•21 views

CVE-2025-1063

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.4 via the rtcltaxonomysettingsexport function. This makes it possible for unauthenticated attackers to extract sensiti...

5.3CVSS7.3AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/25 12:00 a.m.•29 views

PT-2025-7813 · WordPress · The Classified Listing – Classified Ads & Business Directory Plugin

Name of the Vulnerable Software and Affected Versions: Classified Listing – Classified ads & Business Directory Plugin versions up to, and including, 4.0.4 Description: The issue allows unauthenticated attackers to extract sensitive data, including API keys and tokens, via the rtcl taxonomy...

5.3CVSS9.4AI score0.00355EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/02/25 12:00 a.m.•17 views

WordPress plugin Classified Listing 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

5.3CVSS7.9AI score0.00355EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•12 views

WordPress Taxonomy/Term and Role based Discounts for WooCommerce plugin <= 5.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Mika in WordPress Plugin Taxonomy/Term and Role based Discounts for WooCommerce versions = 5.1...

4.3CVSS6.9AI score0.00478EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•6 views

CVE-2025-24625: Missing Authorization

Missing Authorization vulnerability in Marco Almeida | Webdados Taxonomy/Term and Role based Discounts for WooCommerce taxonomy-discounts-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxonomy/Term and Role based Discounts for WooCommerce:...

4.3CVSS5.9AI score0.00478EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•12 views

WordPress plugin Taxonomy/Term and Role based Discounts for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

4.3CVSS8.3AI score0.00478EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•16 views

PT-2025-5453 · Woocommerce · Taxonomy/Term/Role Based Discounts For Woocommerce

Name of the Vulnerable Software and Affected Versions: Taxonomy/Term and Role based Discounts for WooCommerce versions n/a through 5.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

4.3CVSS6.8AI score0.00478EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/01/21 12:05 p.m.•15 views

WordPress Term Taxonomy Converter Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Term Taxonomy Converter versions = 1.2...

7.1CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder