Lucene search
+L

117 matches found

NVD
NVD
added 2025/11/21 5:15 p.m.13 views

CVE-2025-12973

The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, wi...

7.2CVSS0.00932EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/21 4:28 p.m.10 views

EUVD-2025-198496

The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, wi...

7.2CVSS6.8AI score0.00932EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/11/21 4:28 p.m.14 views

CVE-2025-12973 S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload

The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, wi...

7.2CVSS6.9AI score0.00932EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/21 4:28 p.m.25 views

CVE-2025-12973 S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload

The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, wi...

7.2CVSS0.00932EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/21 12:00 a.m.12 views

WordPress plugin S2B AI Assistant 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

7.2CVSS6.8AI score0.00932EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-5963

Malware in sbrugna...

7.5CVSS7.6AI score0.01183EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2024-53865

Malicious code in bioql PyPI...

9.8CVSS7.6AI score0.00376EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-46846

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-15760

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00479EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-29250

Malicious code in bioql PyPI...

4.3CVSS8.8AI score0.002EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-3865

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.01172EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/05/23 9:38 a.m.10 views

CVE-2024-24706

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

5.4CVSS6.3AI score0.00218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:49 a.m.10 views

CVE-2024-34813

Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through = 1.7.8...

5.3CVSS5.9AI score0.00316EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:38 a.m.8 views

CVE-2024-31354

Cross-Site Request Forgery CSRF vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

4.3CVSS8.6AI score0.002EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:37 a.m.12 views

CVE-2017-1000478

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...

5.4CVSS6.4AI score0.00771EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:03 p.m.12 views

CVE-2025-39410

Deserialization of Untrusted Data vulnerability in themegusta Smart Sections Theme Builder - WPBakery Page Builder Addon.This issue affects Smart Sections Theme Builder - WPBakery Page Builder Addon: from n/a through 1.7.8...

9.8CVSS8.6AI score0.00479EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/19 12:00 a.m.10 views

WordPress plugin Smart Sections Theme Builder - WPBakery Page Builder Addon 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Smart Sections Theme...

9.8CVSS8.5AI score0.00479EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/16 12:00 a.m.9 views

WordPress plugin WooCommerce POS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.3AI score0.00279EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/25 4:04 p.m.10 views

CVE-2025-39567

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through = 1.7.8...

7.1CVSS7.2AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:46 p.m.49 views

CVE-2025-39567

CVE-2025-39567 targets Shamalli Web Directory Free (WordPress plugin)

7.1CVSS7.2AI score0.00224EPSS
SaveExploits0References1
Rows per page
Query Builder