Lucene search
+L

188 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:30 a.m.9 views

CVE-2023-41870

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5...

8.8CVSS8.5AI score0.00649EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:27 a.m.7 views

CVE-2023-25990

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10...

8.8CVSS8.9AI score0.00679EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:36 a.m.11 views

CVE-2023-49829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS – eLearning and online course solution allows Stored XSS.This issue affects Tutor LMS – eLearning and online course solution: from n/a through 2.2.4...

5.9CVSS6.5AI score0.00394EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:14 a.m.10 views

CVE-2023-25799

Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8...

8.8CVSS6.9AI score0.00458EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/12 9:7 a.m.26 views

CVE-2025-32230

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Themeum Tutor LMS tutor.This issue affects Tutor LMS: from n/a through = 3.4.0...

4.3CVSS7.2AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/10 8:15 a.m.24 views

CVE-2025-32230

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Themeum Tutor LMS tutor.This issue affects Tutor LMS: from n/a through = 3.4.0...

4.3CVSS0.00249EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 8:9 a.m.74 views

CVE-2025-32230

CVE-2025-32230 is a Tutor LMS HTML Injection (Basic XSS) vulnerability. The Wordfence vulnerability entry confirms it affects Tutor LMS versions up to 3.4.0 and notes the issue stems from improper neutralization of script-related HTML tags, enabling potential HTML injection. The vulnerability is ...

4.3CVSS7.2AI score0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/10 8:9 a.m.30 views

CVE-2025-32230 WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Themeum Tutor LMS tutor.This issue affects Tutor LMS: from n/a through = 3.4.0...

4.3CVSS0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 8:9 a.m.7 views

CVE-2025-32230 WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Themeum Tutor LMS. This issue affects Tutor LMS: from n/a through 3.4.0...

4.3CVSS4.7AI score0.00249EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 3:38 p.m.11 views

CVE-2025-31892

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum WP Crowdfunding wp-crowdfunding allows Stored XSS.This issue affects WP Crowdfunding: from n/a through = 2.1.15...

6.5CVSS7.2AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 3:16 p.m.15 views

CVE-2025-31892

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum WP Crowdfunding wp-crowdfunding allows Stored XSS.This issue affects WP Crowdfunding: from n/a through = 2.1.15...

6.5CVSS0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/18 10:27 p.m.12 views

CVE-2025-26767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Qubely qubely allows Stored XSS.This issue affects Qubely: from n/a through = 1.8.12...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/16 11:15 p.m.14 views

CVE-2025-26767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Qubely qubely allows Stored XSS.This issue affects Qubely: from n/a through = 1.8.12...

6.5CVSS0.0021EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/16 11:15 p.m.7 views

CVE-2025-26767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Qubely – Advanced Gutenberg Blocks allows Stored XSS. This issue affects Qubely – Advanced Gutenberg Blocks: from n/a through 1.8.12...

5.4CVSS5.8AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/16 10:17 p.m.68 views

CVE-2025-26767

CVE-2025-26767 affects WordPress plugin Qubely – Advanced Gutenberg Blocks (versions from n/a through 1.8.12). The issue is caused by improper neutralization of input during web page generation, enabling Stored XSS. Affected component: Qubely blocks code path that renders pages can store maliciou...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 12:54 p.m.13 views

CVE-2024-43282

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.2...

7.6CVSS7.5AI score0.00439EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 12:36 p.m.13 views

CVE-2024-43955

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Themeum Droip allows File Manipulation.This issue affects Droip: from n/a through 1.1.1...

10CVSS5.2AI score0.00604EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:11 a.m.4 views

CVE-2024-54282

Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue affects WP Mega Menu: from n/a through = 1.4.2...

7.2CVSS7.2AI score0.0081EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:54 a.m.12 views

CVE-2024-37256

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.1...

7.6CVSS7.7AI score0.00577EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/13 3:15 p.m.8 views

CVE-2024-54282

Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue affects WP Mega Menu: from n/a through = 1.4.2...

7.2CVSS0.0081EPSS
SaveExploits0References1
Rows per page
Query Builder