Lucene search
K

12 matches found

Vulnrichment
Vulnrichment
added 2026/03/05 5:54 a.m.2 views

CVE-2026-28130 WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through = 4.14.0...

7.1CVSS5.9AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.24 views

CVE-2026-28130 WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through = 4.14.0...

7.1CVSS0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:54 a.m.8 views

CVE-2026-28130

CVE-2026-28130 is a Reflected XSS in AndonDesign UDesign (u-design) caused by Improper Neutralization of Input During Web Page Generation. Affected: UDesign theme for WordPress, version range n/a through

7.1CVSS5.9AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/26 10:8 a.m.3 views

WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme UDesign versions = 4.14.0...

7.1CVSS5.9AI score0.00045EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-7281

Malware in sbrugna...

6.1CVSS6.3AI score0.00335EPSS
Exploits1References5
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.3 views

WordPress uDesign theme <= 4.11.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme uDesign versions = 4.11.2...

6.5CVSS7AI score0.00323EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2024/04/25 12:0 a.m.2 views

WordPress theme UDesign 跨站脚本漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in WordPress theme UDesign version 4.7.3 and prior versions, whic...

7.1CVSS6.1AI score0.00186EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/04/23 2:13 p.m.2 views

WordPress UDesign theme <= 4.13.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme UDesign versions = 4.13.5...

7.1CVSS6.1AI score0.00186EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/04/23 12:0 a.m.7 views

WordPress UDesign Theme <= 4.7.3 is vulnerable to Cross Site Scripting (XSS)

Software UDesign Type Theme Vulnerable versions = 4.7.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-4077 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b5fe2949f69d Credits Rafie Muhammad Patchstack Required privilege...

7.1CVSS6.8AI score0.00186EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2017/10/18 12:0 a.m.3 views

WordPress uDesign Theme Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site. uDesign aka U-Design is one of the theme plug-ins. A cross-site scripting vulnerability exists in WordPress...

6.1CVSS5.8AI score0.00335EPSS
Exploits1References1
NVD
NVD
added 2017/10/03 1:29 a.m.11 views

CVE-2015-7357

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

6.1CVSS6.1AI score0.00335EPSS
Exploits1References4
Cvelist
Cvelist
added 2017/10/02 7:0 p.m.12 views

CVE-2015-7357

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

6.1AI score0.00335EPSS
Exploits1References4
Rows per page
Query Builder