1097 matches found
WordPress plugin Lunar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
WordPress Solace Extra plugin <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by WordFence in WordPress Plugin Solace Extra versions = 1.3.0...
CVE-2025-23552
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yashar Texteller texteller allows Reflected XSS.This issue affects Texteller: from n/a through = 1.3.0...
CVE-2025-23552 WordPress Texteller plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Texteller allows Reflected XSS. This issue affects Texteller: from n/a through 1.3.0...
CVE-2025-23520 WordPress Heartland Management Terminal plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SecureSubmit Heartland Management Terminal allows Reflected XSS. This issue affects Heartland Management Terminal: from n/a through 1.3.0...
CVE-2025-23520
CVE-2025-23520 affects the WordPress Heartland Management Terminal plugin (versions ≤ 1.3.0). The vulnerability is a reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected product is the Heartland Management Terminal plugin for WordPress; no...
WordPress plugin WP Less Compiler 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
WordPress plugin Heartland Management Terminal 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...
WordPress plugin Texteller 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
JupyterHub 数据伪造问题漏洞
JupyterHub is a JupyterHub open source multi-user server for Jupyter. A Data Forgery Issue vulnerability exists in JupyterHub version 1.3.0 that stems from LTI13Authenticator not verifying JWT signatures, which could lead to forged requests being authorized...
CVE-2025-27315
Cross-Site Request Forgery CSRF vulnerability in wptom All-In-One Cufon all-in-one-cufon allows Cross Site Request Forgery.This issue affects All-In-One Cufon: from n/a through = 1.3.0...
WordPress All-In-One Cufon Plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin All-In-One Cufon versions = 1.3.0...
CVE-2025-27315
CVE-2025-27315 is a CSRF vulnerability in WordPress All-In-One Cufon (affected: 1.3.0 and earlier). The connected Patchstack entry notes that All-In-One Cufon versions up to 1.3.0 are affected and recommends upgrading to a version that includes a fix; no exploit details are provided in the source...
WordPress plugin All-In-One Cufon 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2025-7740 · Unknown · All-In-One Cufon
Name of the Vulnerable Software and Affected Versions: All-In-One Cufon versions 1.3.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This allows for Cross Site Request Forgery. Recommendations: For All-In-One Cufon versions 1.3.0 and earlier,...
WordPress Cosmic Blocks (40+) Content Editor Blocks Collection plugin <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Cosmic Blocks versions = 1.3.0...
CVE-2024-29896
Astro-Shield is a library to compute the subresource integrity hashes for your JS scripts and CSS stylesheets. When automated CSP headers generation for SSR content is enabled and the web application serves content that can be partially controlled by external users, then it is possible that the C...
CVE-2024-49268
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in sunburntkamel disconnected allows Reflected XSS.This issue affects disconnected: from n/a through 1.3.0...
CVE-2024-54237
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni CRM Lead ni-crm-lead allows Reflected XSS.This issue affects Ni CRM Lead: from n/a through = 1.3.0...