Lucene search
+L

3918 matches found

Vulnrichment
Vulnrichment
added 2025/10/16 4:27 a.m.3 views

CVE-2025-11814 Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to 3.21.1 exclusive due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

6.4CVSS4.9AI score0.00275EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/16 4:27 a.m.17 views

CVE-2025-11814 Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to 3.21.1 exclusive due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

6.4CVSS0.00275EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/16 4:27 a.m.19 views

CVE-2025-11814

The CVE-2025-11814 entry concerns the Ultimate Addons for WPBakery Page Builder (WordPress). It describes a Stored Cross-Site Scripting vulnerability in all versions up to 3.21.1 (exclusive) caused by insufficient input sanitization and output escaping. The issue could allow unauthenticated attac...

6.4CVSS4.9AI score0.00275EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/16 12:0 a.m.6 views

CVE-2025-61540

SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...

7.8AI score0.00272EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.9 views

Ultimate PHP Board 安全漏洞

Ultimate PHP Board is a message board software from PHP Outburst open source. A security vulnerability exists in Ultimate PHP Board version 2.2.7, which stems from an unvalidated username field in lostpassword.php and could lead to a SQL injection attack...

6.5CVSS7.8AI score0.00272EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/16 12:0 a.m.21 views

CVE-2025-61539

Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...

0.00251EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/16 12:0 a.m.7 views

CVE-2025-61540

SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...

6.5CVSS8.3AI score
SaveExploits0References4
CVE
CVE
added 2025/10/16 12:0 a.m.24 views

CVE-2025-61539

CVE-2025-61539 describes a Cross-Site Scripting (XSS) vulnerability in Ultimate PHP Board 2.2.7 exploited via the u_name parameter in lostpassword.php. Affected software: Ultimate PHP Board 2.2.7. The vulnerability is triggered through input in the lostpassword.php page’s u_name parameter, enabli...

6.1CVSS5.7AI score0.00251EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/16 12:0 a.m.5 views

CVE-2025-61539

Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...

5.7AI score0.00251EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/16 12:0 a.m.23 views

CVE-2025-61540

SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...

0.00272EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.11 views

Ultimate PHP Board 安全漏洞

Ultimate PHP Board is a message board software from PHP Outburst open source. A security vulnerability exists in Ultimate PHP Board version 2.2.7, which stems from improper handling of the uname parameter in the lostpassword.php file, which could lead to a cross-site scripting attack...

6.1CVSS6.1AI score0.00251EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.7 views

WordPress plugin Ultimate Addons for WPBakery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

6.4CVSS5.9AI score0.00275EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/16 12:0 a.m.32 views

CVE-2025-61540

CVE-2025-61540 : The Red Hat, NVD, OSV, EUVD, NVD (and other) records all describe a SQL injection in Ultimate PHP Board version 2.2.7, exploitable via the username field in lostpassword.php. The underlying issue is an unvalidated/unsafely assembled username input leading to SQL injection, with C...

6.5CVSS7.8AI score0.00272EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/10/16 12:0 a.m.10 views

CVE-2025-61539

Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...

6.1CVSS6.2AI score
SaveExploits0References4
Patchstack
Patchstack
added 2025/10/10 4:0 a.m.8 views

WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter in WordPress Plugin Ultimate Addons for WPBakery Page Builder versions 3.21.1...

6.5CVSS5.6AI score0.00154EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/07 6:9 a.m.26 views

CVE-2025-9703

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

4.3CVSS6.2AI score0.00165EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-3153

Malware in sbrugna...

4.3CVSS6.4AI score0.01342EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2001-1009

Malware in sbrugna...

7.2CVSS6.4AI score0.00397EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-6363

Malware in sbrugna...

6.8CVSS6.4AI score0.01838EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-4646

Malware in sbrugna...

6.8CVSS6.4AI score0.00909EPSS
SaveExploits2References5
Rows per page
Query Builder