Lucene search
K

8 matches found

NVD
NVD
added 2026/03/05 6:16 a.m.2 views

CVE-2026-22479

Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Post Submission: from n/a through = 2.4.0...

7.5CVSS0.00042EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.2 views

PT-2026-23211

Name of the Vulnerable Software and Affected Versions ThemeRuby Easy Post Submission versions through 2.2.0 Description The software contains a missing authorization flaw, allowing exploitation of incorrectly configured access control security levels. The issue allows unauthorized access...

5.8AI score0.00042EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/25 9:16 a.m.6 views

CVE-2026-1097

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.8AI score0.00016EPSS
Exploits0References1
NVD
NVD
added 2026/01/24 8:16 a.m.2 views

CVE-2026-1097

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00016EPSS
Exploits0References4
NVD
NVD
added 2024/07/06 10:15 a.m.17 views

CVE-2024-37260

Server-Side Request Forgery SSRF vulnerability in Theme-Ruby Foxiz.This issue affects Foxiz: from n/a through 2.3.5...

9.3CVSS0.00325EPSS
Exploits0References1
OSV
OSV
added 2024/07/06 10:15 a.m.3 views

CVE-2024-37260

Server-Side Request Forgery SSRF vulnerability in Theme-Ruby Foxiz.This issue affects Foxiz: from n/a through 2.3.5...

9.3CVSS5.8AI score0.00325EPSS
Exploits0References1
CVE
CVE
added 2024/07/06 9:46 a.m.57 views

CVE-2024-37260

CVE-2024-37260 is a Server-Side Request Forgery (SSRF) vulnerability affecting WordPress Foxiz Theme (Foxiz) versions up to 2.3.5. Public sources (NVD, CVE listings) confirm the issue and its high/critical impact metrics (CVSS v3.1: 9.3 base score; network attack, no user interaction). The Wordfe...

9.3CVSS8.2AI score0.00325EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/06 12:0 a.m.4 views

PT-2024-27425 · Foxiz · Foxiz

Name of the Vulnerable Software and Affected Versions: Foxiz versions 2.3.5 and earlier Description: A Server-Side Request Forgery SSRF vulnerability has been identified in Theme-Ruby Foxiz. This issue allows for unauthorized access to internal resources, potentially leading to sensitive data...

9.3CVSS6.9AI score0.00325EPSS
Exploits0References12
Rows per page
Query Builder