Lucene search
+L

26 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•17 views

CVE-2026-32495

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through = 2.10.0...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•20 views

EUVD-2026-15839

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through = 2.10.0...

5.8AI score0.00394EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:17 p.m.•17 views

CVE-2026-32495

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through = 2.10.0...

7.5CVSS0.00394EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:14 p.m.•38 views

CVE-2026-32495

CVE-2026-32495 is a Missing Authorization vulnerability impacting the WP Terms Popup (WP Terms Popup) WordPress plugin, affecting versions from unknown up to and including 2.10.0. The root cause is an incorrectly configured access control security level (Missing Authorization), which can allow an...

7.5CVSS6AI score0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•54 views

CVE-2026-32495 WordPress WP Terms Popup plugin <= 2.10.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through = 2.10.0...

7.5CVSS0.00394EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/25 4:14 p.m.•15 views

CVE-2026-32495

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through = 2.10.0...

5.8AI score0.00394EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/25 4:14 p.m.•6 views

CVE-2026-32495 WordPress WP Terms Popup plugin <= 2.10.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through = 2.10.0...

6AI score0.00394EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•26 views

PT-2026-28009

Name of the Vulnerable Software and Affected Versions WP Terms Popup versions through 2.10.0 Description An authorization issue exists in WP Terms Popup. The issue involves exploiting incorrectly configured access control security levels. Recommendations Update WP Terms Popup to a version later...

7.5CVSS5.9AI score0.00394EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•21 views

WordPress plugin WP Terms Popup 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•3 views

CVE-2026-32495: Missing Authorization

Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through = 2.10.0...

7.5CVSS5.9AI score0.00394EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/03/20 5:55 p.m.•20 views

WordPress WP Terms Popup plugin <= 2.10.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Terms Popup versions = 2.10.0...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-28070

Malicious code in bioql PyPI...

5.9CVSS5.2AI score0.00392EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:56 a.m.•16 views

CVE-2023-24006

Auth. admin+ Cross-Site Scripting XSS vulnerability in Link Software LLC WP Terms Popup plugin = 2.6.0 versions...

5.9CVSS5.9AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:20 p.m.•45 views

CVE-2025-47592

CVE-2025-47592 refers to a stored XSS in the WordPress plugin Terms Popup On User Login (TPUL) for User Login and WooCommerce Checkout. Root cause: improper input neutralization during web page generation. Affected versions: TPUL &lt;= 2.0.3 (n/a through 2.0.3). Impact: stored Cross-Site Scriptin...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•8 views

CVE-2025-47592 WordPress Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL plugin <= 2.0.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Árpád Lehel Mátyus Terms Popup On User Login terms-popup-on-user-login allows Stored XSS.This issue affects Terms Popup On User Login: from n/a through = 2.0.8...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•9 views

PT-2025-20169 · Unknown · Lehel Mátyus Legal Terms/Conditions Popup For User Login/Woocommerce Checkout

Name of the Vulnerable Software and Affected Versions: Lehel Mátyus Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL versions 2.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored...

5.9CVSS6.1AI score0.00275EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•1 views

CVE-2025-47592: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Árpád Lehel Mátyus Terms Popup On User Login terms-popup-on-user-login allows Stored XSS.This issue affects Terms Popup On User Login: from n/a through = 2.0.8...

5.9CVSS5.8AI score0.00275EPSS
SaveExploits0References1
OSV
OSV
•added 2023/04/06 8:15 a.m.•17 views

CVE-2023-24006

Auth. admin+ Cross-Site Scripting XSS vulnerability in Link Software LLC WP Terms Popup plugin = 2.6.0 versions...

4.8CVSS5.8AI score0.00392EPSS
SaveExploits0References1
NVD
NVD
•added 2023/04/06 8:15 a.m.•21 views

CVE-2023-24006

Auth. admin+ Cross-Site Scripting XSS vulnerability in Link Software LLC WP Terms Popup plugin = 2.6.0 versions...

5.9CVSS5.5AI score0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/04/06 7:55 a.m.•30 views

CVE-2023-24006 WordPress WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups Plugin <= 2.6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Cross-Site Scripting XSS vulnerability in Link Software LLC WP Terms Popup plugin = 2.6.0 versions...

5.9CVSS5.6AI score0.00392EPSS
SaveExploits0References1
Rows per page
Query Builder