Lucene search
+L

489 matches found

Cvelist
Cvelist
•added 2025/09/05 1:45 p.m.•28 views

CVE-2025-58880 WordPress Translate This gTranslate Shortcode Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reubenthiessen Translate This gTranslate Shortcode translate-this-google-translate-web-element-shortcode allows Stored XSS.This issue affects Translate This gTranslate Shortcode: from n/a through =...

6.5CVSS0.00169EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/05 1:45 p.m.•40 views

CVE-2025-58880

CVE-2025-58880 affects the WordPress plugin Translate This gTranslate Shortcode (versions up to 1.0). The vulnerability is an Stored Cross-Site Scripting (XSS) arising from improper input neutralization during web page generation. The CVE entry notes a MODERATE risk (CVSS v3.1 base score 6.5) wit...

6.5CVSS5.9AI score0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/05 1:45 p.m.•15 views

CVE-2025-58880 WordPress Translate This gTranslate Shortcode Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reubenthiessen Translate This gTranslate Shortcode translate-this-google-translate-web-element-shortcode allows Stored XSS.This issue affects Translate This gTranslate Shortcode: from n/a through =...

6.5CVSS5.9AI score0.00169EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/05 1:45 p.m.•16 views

WordPress Translate This gTranslate Shortcode Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Mika in WordPress Plugin Translate This gTranslate Shortcode versions = 1.0...

6.5CVSS6.1AI score0.00169EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•23 views

WordPress plugin Translate This gTranslate Shortcode Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.7AI score0.00169EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•3 views

CVE-2025-58880: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reubenthiessen Translate This gTranslate Shortcode translate-this-google-translate-web-element-shortcode allows Stored XSS.This issue affects Translate This gTranslate Shortcode: from n/a through =...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/09/03 9:28 p.m.•22 views

netfilter: flowtable_offload: fix using __this_cpu_add in preemptible

...

5.5CVSS7AI score0.00202EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/28 7:12 a.m.•7 views

Malicious code in this-is-vvvv (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/28 7:12 a.m.•7 views

MAL-2025-41779 Malicious code in this-is-vvvv (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2017-6819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp- admin/includes/class-wp-press-this.php, leading to excessive use of server...

6.5CVSS6.5AI score0.02197EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2017-5610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface,...

5.3CVSS6.8AI score0.05201EPSS
SaveExploits0References2
osv_mal
osv_mal
•added 2025/08/23 3:00 p.m.•13 views

MAL-2025-41333 Malicious code in this-should-be-ignored (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b64896576ac7254afb7e1202835ec4f39b5b64af2cb380a7bf3b172deba75497 The OpenSSF Package Analysis project identified...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/19 7:58 p.m.•9 views

CVE-2025-38565

In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perfmmap fail When perfmmap fails to allocate a buffer, it still invokes the eventmapped callback of the related event. On X86 this might increase the perfrdpmcallowed reference counter. But nothing undoe...

5.5CVSS6.2AI score0.00192EPSS
SaveExploits0References4
NVD
NVD
•added 2025/08/16 9:15 a.m.•17 views

CVE-2025-8719

The Translate This gTranslate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘baselang’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00253EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/16 8:27 a.m.•57 views

CVE-2025-8719

CVE-2025-8719 documents a Stored Cross-Site Scripting vulnerability in Translate This gTranslate Shortcode for WordPress, affecting all versions up to 1.0. The issue is triggered via the base_lang parameter and requires authentication at Contributor level or higher to inject scripts that execute ...

6.4CVSS6AI score0.00253EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/16 8:27 a.m.•30 views

CVE-2025-8719 Translate This - Google Translate Web Element Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via base_lang Parameter

The Translate This gTranslate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘baselang’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00253EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/16 12:00 a.m.•22 views

WordPress plugin Translate This gTranslate Shortcode Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS5.7AI score0.00253EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/16 12:00 a.m.•4 views

CVE-2025-8719: Improper Neutralization of Input During Web Page Generation

The Translate This gTranslate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘baselang’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.00253EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in this-trade-value (npm)

The package this-trade-value was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•11 views

Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder