Lucene search
+L

932 matches found

Patchstack
Patchstack
added 2025/02/14 1:49 p.m.6 views

WordPress Vertex Addons for Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin Vertex Addons for Elementor versions = 1.2.0...

6.5CVSS6.1AI score0.0023EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/06 2:36 a.m.8 views

CVE-2025-23640

Cross-Site Request Forgery CSRF vulnerability in Nazmul Ahsan Rename Author Slug rename-author-slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through = 1.2.0...

7.1CVSS7.2AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:03 p.m.13 views

CVE-2022-1813

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...

9.8CVSS7.1AI score0.02703EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:55 p.m.8 views

CVE-2022-1290

Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse...

9CVSS5.9AI score0.01627EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:49 p.m.15 views

CVE-2022-1045

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

9CVSS5.8AI score0.01561EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:06 p.m.20 views

CVE-2024-25927

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Joel Starnes postMash – custom post order.This issue affects postMash – custom post order: from n/a through 1.2.0...

9.8CVSS8.9AI score0.00565EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:08 a.m.12 views

CVE-2024-54332

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates wp-currency-exchange-rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through = 1.2.0...

7.1CVSS7.2AI score0.00206EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/03 4:15 p.m.11 views

WordPress Listings for Appfolio plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Listings for Appfolio versions = 1.2.0...

7.1CVSS6.2AI score0.00137EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/02/03 3:51 p.m.3 views

WordPress CM Custom WordPress Reports and Analytics plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin CM Custom WordPress Reports and Analytics versions = 1.2.0...

7.1CVSS6.1AI score0.00378EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/02/01 12:00 a.m.5 views

WordPress plugin Responsive iframe 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS7.6AI score0.00336EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.25 views

CVE-2025-23758 WordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pootlepress Pootle button pootle-button allows Reflected XSS.This issue affects Pootle button: from n/a through = 1.2.0...

7.1CVSS0.00388EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.7 views

WordPress plugin Pootle button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00388EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/16 8:15 p.m.9 views

CVE-2025-23640

Cross-Site Request Forgery CSRF vulnerability in Nazmul Ahsan Rename Author Slug rename-author-slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through = 1.2.0...

7.1CVSS0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:06 p.m.21 views

CVE-2025-23640 WordPress Rename Author Slug plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nazmul Ahsan Rename Author Slug rename-author-slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through = 1.2.0...

7.1CVSS0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/16 12:00 a.m.8 views

WordPress plugin Rename Author Slug 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.3AI score0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.6 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Block permissions versions 1.0.0 through 1.2.0, which stems from the inclusion of an authorization error vulnerability...

8.8CVSS6.8AI score0.00338EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/07 10:48 a.m.13 views

CVE-2025-22343 WordPress wpSOL plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in koter84 wpSOL wpsol allows Stored XSS.This issue affects wpSOL: from n/a through = 1.2.0...

7.1CVSS7.2AI score0.00149EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/03 1:50 p.m.7 views

WordPress WPAchievements Free Plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin WPAchievements Free versions = 1.2.0...

6.5CVSS6.1AI score0.00214EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/02 12:15 p.m.22 views

CVE-2024-56263

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Shots for Dribbble gs-dribbble-portfolio allows DOM-Based XSS.This issue affects GS Shots for Dribbble: from n/a through = 1.2.0...

6.5CVSS0.00258EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.24 views

CVE-2024-37435

Cross-Site Request Forgery CSRF vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through = 1.2.0...

8.8CVSS0.00211EPSS
SaveExploits0References1
Rows per page
Query Builder