Lucene search
+L

17 matches found

NVD
NVD
•added 2026/09/22 10:17 a.m.•15 views

CVE-2026-94117

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3...

7.6CVSS0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 9:13 a.m.•16 views

CVE-2026-94117 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•8 views

CVE-2026-94117: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•4 views

PT-2026-96695

Name of the Vulnerable Software and Affected Versions DevItems HashBar – WordPress Notification Bar versions prior to 2.0.4 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•2 views

CVE-2026-66602: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...

8.8CVSS5.8AI score0.00201EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-56093

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.0031EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-36755

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:42 a.m.•17 views

CVE-2024-37556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SeedProd WordPress Notification Bar allows Stored XSS.This issue affects WordPress Notification Bar: from n/a through 1.3.10...

5.9CVSS6.8AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:00 a.m.•15 views

CVE-2023-51372

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification Bar: from n/a through 1.4.1...

5.9CVSS6.5AI score0.0031EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/21 7:15 a.m.•39 views

CVE-2024-37556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SeedProd WordPress Notification Bar allows Stored XSS.This issue affects WordPress Notification Bar: from n/a through 1.3.10...

5.9CVSS0.00276EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/21 6:53 a.m.•72 views

CVE-2024-37556

CVE-2024-37556 is an Stored XSS in SeedProd WordPress Notification Bar. The vulnerability stems from improper input neutralization during web page generation, affecting WordPress Notification Bar versions n/a–1.3.10. Exploitation requires authenticated access and user interaction (UI:R) with netw...

5.9CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/21 12:00 a.m.•4 views

CVE-2024-37556: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SeedProd WordPress Notification Bar allows Stored XSS.This issue affects WordPress Notification Bar: from n/a through 1.3.10...

5.9CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/07/06 12:00 a.m.•25 views

WordPress WordPress Notification Bar Plugin <= 1.3.10 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Notification Bar Type Plugin Vulnerable versions = 1.3.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37556 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b8739a663b5e Credits Sharanabasappa Required...

5.9CVSS6.6AI score0.00276EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/12/29 11:15 a.m.•21 views

CVE-2023-51372

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification Bar: from n/a through 1.4.1...

4.8CVSS5.8AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/29 10:52 a.m.•103 views

CVE-2023-51372

CVE-2023-51372 is a stored XSS vulnerability in the HashBar – WordPress Notification Bar plugin for WordPress. The issue affects HashBar versions up to 1.4.1 (from n/a through 1.4.1) and is caused by improper input neutralization during web page generation. The vulnerability is listed as patched ...

5.9CVSS6.5AI score0.0031EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•2 views

CVE-2023-51372: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification Bar: from n/a through 1.4.1...

5.9CVSS5.6AI score0.0031EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•16 views

WordPress WordPress Notification Bar Plugin - TinyBar Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Notification Bar Plugin - TinyBar Type Plugin Vulnerable versions = 2.1 Fixed in 2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2bc5afc6df48 Credits Rafie...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder