Lucene search
+L

1126 matches found

CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•19 views

WordPress plugin Moosend Landing Pages 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•17 views

WordPress plugin Depicter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.4AI score0.00273EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•7 views

WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞

...

5.3CVSS6.7AI score0.00264EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•17 views

WordPress plugin MasterStudy LMS WordPress Plugin – for Online Courses and Education 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

5.4CVSS6.4AI score0.00166EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•11 views

WordPress plugin Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS6.4AI score0.00261EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•9 views

WordPress plugin Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Tag...

4.3CVSS6.3AI score0.0022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•18 views

PT-2026-34077

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 25.0.1 Description An issue in the Libraries component allows an unauthenticated attacker with network access via multiple protocols to compromise the system. This can lead to unauthorized update, insert, or delete acces...

7.5CVSS7.7AI score0.00891EPSS
SaveExploits1References61
Cvelist
Cvelist
•added 2025/12/18 9:21 a.m.•43 views

CVE-2025-14364 Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation

The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capability check on the Ajax::handlerequest function in all versions up to, and including, 2.0.8. This makes it possible for authenticated...

8.8CVSS0.00352EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•1 views

CVE-2025-14061: Missing Authorization

The Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker for GDPR, CCPA & ePrivacy : WP Cookie Consent plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the gdprdeletepolicydata function in all versions up to, and...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•14 views

PT-2025-51228

The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the add images to gallery callback function in all versions up to, and including, 2.13.3. This makes it possible for authenticated attackers,...

4.3CVSS5.2AI score0.00243EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/14 5:03 a.m.•28 views

CVE-2025-14446

The Popup Builder Easy Notify Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the easynotifycpreset function in all versions up to, and including, 1.1.37. This makes it possible for authenticated attackers, with Subscriber-level...

6.5CVSS5.1AI score0.00252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/14 5:03 a.m.•13 views

CVE-2025-14397

The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to a missing capability check on the postemipsumgenerateusers function in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with...

8.8CVSS5.2AI score0.00284EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/13 6:30 p.m.•14 views

EUVD-2025-203234

The Popover Windows plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple ajax actions e.g., popsubmit, popthemesubmit in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with subscriber-lev...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/13 4:16 p.m.•14 views

CVE-2025-14397

The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to a missing capability check on the postemipsumgenerateusers function in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with...

8.8CVSS0.00284EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•0 views

CVE-2025-14395: Missing Authorization

The Popover Windows plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple ajax actions e.g., popsubmit, popthemesubmit in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with subscriber-lev...

4.3CVSS5.7AI score0.00188EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•14 views

WordPress plugin Popup Builder (Easy Notify Lite) 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS6.3AI score0.00252EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•10 views

WordPress plugin Mavix Education 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.3AI score0.00188EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•19 views

WordPress plugin Devs CRM – Manage tasks, attendance and teams all together 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. WordPress plugin Devs CRM - Manage task...

5.3CVSS6.2AI score0.00273EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•14 views

WordPress plugin Premmerce Brands for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.3AI score0.00283EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•0 views

CVE-2025-13314: Missing Authorization

The Product Filtering by Categories, Tags, Price Range for WooCommerce – Filter Plus plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.1.6 due to a missing capability check on the 'filtersavesettings' and 'addfilteroptions' AJAX action...

5.3CVSS5.8AI score0.00284EPSS
SaveExploits0References1
Rows per page
Query Builder