Lucene search
K

27 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.2 views

CVE-2025-68842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through = 1.52...

7.1CVSS5.5AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.2 views

CVE-2025-68842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through = 1.52...

7.1CVSS0.00045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.1 views

CVE-2025-68842 WordPress Widget Logic Visual plugin <= 1.52 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through = 1.52...

5.3AI score0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.4 views

CVE-2025-68842

CVE-2025-68842 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Widget Logic Visual . Affected software: Widget Logic Visual

7.1CVSS5.5AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.18 views

CVE-2025-68842 WordPress Widget Logic Visual plugin <= 1.52 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through = 1.52...

7.1CVSS0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.2 views

PT-2026-21104

Name of the Vulnerable Software and Affected Versions Widget Logic Visual versions through 1.52 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Reflected Cross-site Scripting XSS. This means an attacker...

5.4AI score0.00045EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

WordPress plugin Widget Logic Visual 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.1CVSS5.6AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/27 11:46 a.m.2 views

WordPress Widget Logic Visual plugin <= 1.52 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin Widget Logic Visual versions = 1.52...

7.1CVSS5.9AI score0.00045EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/07 3:54 p.m.3 views

CVE-2025-32222

Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...

9.9CVSS7AI score0.00113EPSS
Exploits0References1
NVD
NVD
added 2025/11/06 4:15 p.m.3 views

CVE-2025-32222

Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...

9.9CVSS0.00113EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:53 p.m.2 views

CVE-2025-32222 WordPress Widget Logic <= 6.0.5 - Remote Code Execution (RCE) Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...

9.9CVSS6.5AI score0.00113EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/06 3:53 p.m.7 views

CVE-2025-32222 WordPress Widget Logic <= 6.0.5 - Remote Code Execution (RCE) Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...

9.9CVSS0.00113EPSS
Exploits0References1
CVE
CVE
added 2025/11/06 3:53 p.m.43 views

CVE-2025-32222

CVE-2025-32222 affects WordPress Widget Logic plugin, with Code Injection allowing Remote Code Execution in Widget Logic

9.9CVSS6.6AI score0.00113EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/06 3:53 p.m.3 views

EUVD-2025-38031

Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...

6.5AI score0.00113EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.2 views

WordPress plugin Widget Logic 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...

9.9CVSS7.3AI score0.00113EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.4 views

PT-2025-45190

Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...

7AI score0.00113EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-4406

Malware in sbrugna...

8.8CVSS8.7AI score0.00296EPSS
Exploits1References5
CNVD
CNVD
added 2019/07/03 12:0 a.m.1 views

WordPress 2by2host Widget Logic Plugin Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. 2by2host Widget Logic plugin is a web widget control plugin used in it. A cross-site request forgery vulnerability exists in the...

8.8CVSS6.7AI score0.00296EPSS
Exploits1References1
Patchstack
Patchstack
added 2019/07/02 12:0 a.m.25 views

WordPress Widget Logic plugin <= 5.10.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress Widget Logic plugin versions = 5.10.2. Solution Update the WordPress Widget Logic plugin to the latest available version at least 5.10.3...

8.8CVSS3.7AI score0.00296EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2019/07/02 12:0 a.m.15 views

WordPress Widget Logic plugin <= 5.9.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability that leads to Remote Code Execution RCE found by Paul Dannewitz in WordPress Widget Logic plugin versions = 5.9.0. Solution Update the WordPress Widget Logic plugin to the latest available version at least 5.10.2...

8.8CVSS4.4AI score0.00296EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder