Lucene search
K

6 matches found

CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

WordPress plugin Combo Offers WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS5.7AI score0.00024EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/11/12 12:0 a.m.15 views

WordPress 4.2.x < 4.2.29 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A deserialization vulnerability exists in RequestsUtilityFilteredIterator class. - A cross-site scripting XSS vulnerability exists via global variables and post slugs. - A...

9.8CVSS9.5AI score0.27967EPSS
Exploits1References11
Packet Storm
Packet Storm
added 2020/04/05 12:0 a.m.150 views

WordPress Car Rental System 1.3 Cross Site Scripting

Exploit Title: WordPress Car Rental System 1.3 XSS Vunlerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/car-rental-system-wordpress-plugin/4239755?srank=3 Version: 1.3 Tested on: 5.4.0-kali4-amd64...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.33 views

WordPress 4.2.x < 4.2.13 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the wpplaylistshortcode function within the /wp-includes/media.php script due to a failure to validate input passed via...

6.5CVSS6.4AI score0.13419EPSS
Exploits2References8
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.8 views

WordPress 4.2.x < 4.2.19 MediaElement.js Flash Fallback XSS

According to its self-reported version number, the detected WordPress application is affected by a cross-site scripting vulnerability in the Flash fallback files in MediaElement under wp-includes/js/mediaelement. Note that the scanner has not tested for these issues but has instead relied only on...

6.1CVSS6.6AI score0.02834EPSS
Exploits0References3
exploitpack
exploitpack
added 2015/04/27 12:0 a.m.12 views

WordPress 4.2 - Persistent Cross-Site Scripting

WordPress 4.2 - Persistent Cross-Site Scripting Source: http://klikki.fi/adv/wordpress2.html Overview Current versions of WordPress are vulnerable to a stored XSS. An unauthenticated attacker can inject JavaScript in WordPress comments. The script is triggered when the comment is viewed. If...

6.8AI score
Exploits0
Rows per page
Query Builder