Lucene search
K

28 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:44 a.m.5 views

CVE-2022-0321

The WP Voting Contest WordPress plugin before 3.0 does not sanitise and escape the postid parameter before outputting it back in the response via the wpvcsocialshareicons AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.1AI score0.0032EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.2 views

CVE-2025-60086

Missing Authorization vulnerability in Matt WP Voting Contest wp-voting-contest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Voting Contest: from n/a through = 5.8...

7.5CVSS7AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.1 views

EUVD-2025-204103

Missing Authorization vulnerability in Matt WP Voting Contest wp-voting-contest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Voting Contest: from n/a through = 5.8...

7.5CVSS6.5AI score0.00038EPSS
Exploits0References2
NVD
NVD
added 2025/12/18 8:16 a.m.1 views

CVE-2025-60086

Missing Authorization vulnerability in Matt WP Voting Contest wp-voting-contest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Voting Contest: from n/a through = 5.8...

7.5CVSS0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.18 views

CVE-2025-60086 WordPress WP Voting Contest plugin <= 5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Matt WP Voting Contest wp-voting-contest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Voting Contest: from n/a through = 5.8...

7.5CVSS0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.5 views

CVE-2025-60086

CVE-2025-60086 affects the WordPress plugin WP Voting Contest (wp-voting-contest)

7.5CVSS6.6AI score0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.1 views

CVE-2025-60086 WordPress WP Voting Contest plugin <= 5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Matt WP Voting Contest wp-voting-contest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Voting Contest: from n/a through = 5.8...

7.5CVSS6.6AI score0.00038EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.3 views

PT-2025-52143

Missing Authorization vulnerability in Matt WP Voting Contest wp-voting-contest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Voting Contest: from n/a through = 5.8...

7AI score0.00038EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin WP Voting Contest 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.6AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-15490

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.0032EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-28355

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.0017EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/08/21 11:9 a.m.3 views

WordPress WP Voting Contest plugin <= 5.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin WP Voting Contest versions = 5.8...

7.5CVSS7AI score0.00038EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/23 8:40 a.m.2 views

CVE-2025-50017

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt WP Voting Contest wp-voting-contest allows Stored XSS.This issue affects WP Voting Contest: from n/a through = 5.8...

5.9CVSS5.9AI score0.0017EPSS
Exploits0References1
NVD
NVD
added 2025/06/20 3:15 p.m.4 views

CVE-2025-50017

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt WP Voting Contest wp-voting-contest allows Stored XSS.This issue affects WP Voting Contest: from n/a through = 5.8...

5.9CVSS0.0017EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/20 3:3 p.m.15 views

CVE-2025-50017 WordPress WP Voting Contest plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt WP Voting Contest wp-voting-contest allows Stored XSS.This issue affects WP Voting Contest: from n/a through = 5.8...

5.9CVSS0.0017EPSS
Exploits0References1
CVE
CVE
added 2025/06/20 3:3 p.m.15 views

CVE-2025-50017

CVE-2025-50017 is a stored XSS in the WordPress plugin WP Voting Contest (versions n/a through 5.8). The issue stems from improper input neutralization during web page generation, enabling attacker-supplied input to be stored and later reflected to users. According to sources, the vulnerability a...

5.9CVSS5.9AI score0.0017EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/20 3:3 p.m.2 views

CVE-2025-50017 WordPress WP Voting Contest plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt WP Voting Contest wp-voting-contest allows Stored XSS.This issue affects WP Voting Contest: from n/a through = 5.8...

5.9CVSS5.9AI score0.0017EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/20 12:0 a.m.3 views

PT-2025-26374 · WordPress · Matt Wp Voting Contest

Name of the Vulnerable Software and Affected Versions: Matt WP Voting Contest versions n/a through 5.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

5.9CVSS5.9AI score0.0017EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin WP Voting Contest 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS5.8AI score0.0017EPSS
Exploits0References1
OSV
OSV
added 2022/03/14 3:15 p.m.1 views

CVE-2022-0321

The WP Voting Contest WordPress plugin before 3.0 does not sanitise and escape the postid parameter before outputting it back in the response via the wpvcsocialshareicons AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS5.8AI score0.0032EPSS
Exploits2References1
Rows per page
Query Builder