Lucene search
K

1738 matches found

CNNVD
CNNVD
added 2025/04/17 12:0 a.m.3 views

WordPress plugin DeBounce Email Validator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.1AI score0.00235EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.4 views

PT-2025-17029 · Unknown · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker...

7.1CVSS6.2AI score0.00235EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/11 5:49 p.m.4 views

CVE-2025-32580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Stored XSS.This issue affects DeBounce Email Validator: from n/a through = 5.7.1...

7.1CVSS7.2AI score0.00309EPSS
Exploits0References1
OSV
OSV
added 2025/04/11 7:42 a.m.2 views

MAL-2025-3207 Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/11 7:42 a.m.3 views

Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
vulnersOsv
vulnersOsv
added 2025/04/10 3:9 a.m.4 views

org.webjars.npm:class-validator (>=0.8.5 <=0.14.0), org.webjars.npm:image-thumbnail (=1.0.15) +8 more potentially affected by CVE-2025-56200 via org.webjars.npm:validator (>=10.11.0 <=9.2.0)

org.webjars.npm:validator MAVEN version =10.11.0, =0.8.5, =3.1.2, =3.18.2, =3.25.1 Source cves: CVE-2025-56200 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14102004...

6.1CVSS5.8AI score0.003EPSS
Exploits1
Snyk
Snyk
added 2025/04/10 3:9 a.m.1 views

Improper Validation of Specified Type of Input

Overview org.webjars.npm:validator is an A library of string validators and sanitizers. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in the isURL function which does not take into account : as the delimiter in browsers. An attackers can bypass...

6.1CVSS6.2AI score0.003EPSS
Exploits1References2
Snyk
Snyk
added 2025/04/10 3:9 a.m.2 views

Improper Validation of Specified Type of Input

Overview validator is a library of string validators and sanitizers. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in the isURL function which does not take into account : as the delimiter in browsers. An attackers can bypass protocol and domai...

6.1CVSS6AI score0.003EPSS
Exploits1References2
NVD
NVD
added 2025/04/09 5:15 p.m.4 views

CVE-2025-32580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Stored XSS.This issue affects DeBounce Email Validator: from n/a through = 5.7.1...

7.1CVSS0.00309EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/09 4:9 p.m.11 views

CVE-2025-32580 WordPress DeBounce Email Validator plugin <= 5.7.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Stored XSS.This issue affects DeBounce Email Validator: from n/a through = 5.7.1...

7.1CVSS0.00309EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 4:9 p.m.4 views

CVE-2025-32580 WordPress DeBounce Email Validator plugin <= 5.7.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator allows Stored XSS. This issue affects DeBounce Email Validator: from n/a through 5.7.1...

7.1CVSS6.8AI score0.00309EPSS
Exploits0References1
CVE
CVE
added 2025/04/09 4:9 p.m.44 views

CVE-2025-32580

CVE-2025-32580 involves the DeBounce Email Validator WordPress plugin. It describes a Stored XSS via improper input handling during web page generation in DeBounce Email Validator, affecting versions from n/a through 5.7.1. The connected Wordfence/WordPress vulnerability listing indicates the pat...

7.1CVSS7.2AI score0.00309EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/09 3:47 p.m.4 views

WordPress DeBounce Email Validator plugin <= 5.7.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin DeBounce Email Validator versions = 5.7.1...

7.1CVSS7.5AI score0.00309EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.1 views

WordPress plugin DeBounce Email Validator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00309EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.2 views

PT-2025-15795 · Unknown · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.7.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

7.1CVSS7.1AI score0.00309EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/05 2:22 p.m.5 views

CVE-2025-31098

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows PHP Local File Inclusion.This issue affects DeBounce Email Validator: from n/a through = 5.7...

7.5CVSS7.2AI score0.00576EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/03 4:4 p.m.5 views

WordPress DeBounce Email Validator plugin <= 5.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin DeBounce Email Validator versions = 5.7...

7.5CVSS8.2AI score0.00576EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/04/03 2:15 p.m.4 views

CVE-2025-31098

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows PHP Local File Inclusion.This issue affects DeBounce Email Validator: from n/a through = 5.7...

7.5CVSS0.00576EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/03 1:27 p.m.12 views

CVE-2025-31098 WordPress DeBounce Email Validator plugin <= 5.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows PHP Local File Inclusion.This issue affects DeBounce Email Validator: from n/a through = 5.7...

7.5CVSS0.00576EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/03 1:27 p.m.6 views

CVE-2025-31098 WordPress DeBounce Email Validator plugin <= 5.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows PHP Local File Inclusion.This issue affects DeBounce Email Validator: from n/a through = 5.7...

7.5CVSS7.2AI score0.00576EPSS
Exploits0References1
Rows per page
Query Builder