Lucene search
+L

7106 matches found

EUVD
EUVD
added 2025/12/30 3:30 p.m.8 views

EUVD-2023-60408

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then sofipc4routesetup will cause a kernel Oops trying to dereference it. Add a...

5.9AI score0.00162EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.7 views

CVE-2023-54233

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then sofipc4routesetup will cause a kernel Oops trying to dereference it. Add a...

5.7AI score0.00162EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/30 1:49 a.m.6 views

GO-2025-4254 Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls

Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls...

4.3CVSS6.6AI score0.00104EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/29 6:30 p.m.3 views

EUVD-2025-205606

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeaffairs Wp Text Slider Widget allows Stored XSS.This issue affects Wp Text Slider Widget: from n/a through 1.0...

6.5CVSS5.5AI score0.00135EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/29 5:15 p.m.9 views

CVE-2025-68868

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codeaffairs Wp Text Slider Widget wp-text-slider-widget allows Stored XSS.This issue affects Wp Text Slider Widget: from n/a through = 1.0...

6.5CVSS0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/29 4:12 p.m.2 views

CVE-2025-68868 WordPress Wp Text Slider Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codeaffairs Wp Text Slider Widget wp-text-slider-widget allows Stored XSS.This issue affects Wp Text Slider Widget: from n/a through = 1.0...

6.5CVSS5.7AI score0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/29 4:12 p.m.36 views

CVE-2025-68868 WordPress Wp Text Slider Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codeaffairs Wp Text Slider Widget wp-text-slider-widget allows Stored XSS.This issue affects Wp Text Slider Widget: from n/a through = 1.0...

6.5CVSS0.00135EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/29 1:12 p.m.10 views

WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Visitor Stats Widget versions = 1.5.0...

7.1CVSS6.1AI score0.00152EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.9 views

WordPress plugin Wp Text Slider Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.7AI score0.00135EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.10 views

PT-2025-53745

Name of the Vulnerable Software and Affected Versions Codeaffairs Wp Text Slider Widget versions through 1.0 Description The Codeaffairs Wp Text Slider Widget contains a flaw related to improper input handling during web page creation, specifically a Stored Cross-site Scripting issue. This allows...

6.5CVSS7AI score0.00135EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.5 views

CVE-2025-68589

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS5.7AI score0.00222EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/25 11:27 a.m.9 views

WordPress Wp Text Slider Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Wp Text Slider Widget versions = 1.0...

6.5CVSS5.8AI score0.00135EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/12/24 3:30 p.m.6 views

EUVD-2025-205246

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.11...

8.1CVSS6.5AI score0.00222EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.12 views

CVE-2025-68589

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.2 views

CVE-2025-68589 WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS5.1AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.39 views

CVE-2025-68589 WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.12...

5.3CVSS0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.21 views

CVE-2025-68589

CVE-2025-68589 is a WordPress plugin vulnerability reported for the WP Telegram Widget and Join Link (WP telegram widget and join link). The connected Wordfence documentation lists it as a Missing Authorization issue with patch status “Patched” and affected version range “

5.3CVSS5.9AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.5 views

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

5.3CVSS6.6AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.13 views

PT-2025-53277

Name of the Vulnerable Software and Affected Versions WP Socio WP Telegram Widget and Join Link versions through 2.2.11 Description The WP Telegram Widget and Join Link software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized...

8.1CVSS6.6AI score0.00222EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/12/22 2:4 p.m.9 views

WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin WP Telegram Widget and Join Link versions = 2.2.12...

8.1CVSS7AI score0.00222EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder