Lucene search
K

8 matches found

Cvelist
Cvelist
added 2026/03/05 5:53 a.m.24 views

CVE-2025-69343 WordPress Theater for WordPress plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Schmit Theater for WordPress theatre allows Stored XSS.This issue affects Theater for WordPress: from n/a through = 0.19...

6.5CVSS0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/25 11:40 a.m.3 views

WordPress Theater for WordPress plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by PPzzAArr in WordPress Plugin Theater for WordPress versions = 0.19...

6.5CVSS5.9AI score0.00045EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.1 views

WordPress plugin theater 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.6AI score0.00031EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/28 5:14 a.m.3 views

WordPress Theater for WordPress plugin <= 0.19 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Arif Shaikh in WordPress Plugin Theater for WordPress versions = 0.19...

4.3CVSS7AI score0.00031EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2025/11/18 12:0 a.m.3 views

WordPress Theater for WordPress plugin missing license vulnerability

WordPress Theater for WordPress plugin is a plugin designed for advanced users and developers to manage theater related features such as show scheduling, ticketing system and more. A lack of authorization vulnerability exists in the WordPress Theater for WordPress plugin, which can be exploited b...

6.5CVSS6.5AI score0.00038EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/21 11:4 p.m.3 views

WordPress Theater for WordPress plugin <= 0.18.6.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Theater for WordPress versions = 0.18.6.2...

6.1CVSS6.3AI score0.01633EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/11/21 11:15 a.m.13 views

CVE-2024-11371

The Theater for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 0.18.6.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...

6.1CVSS0.01633EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/11/21 12:0 a.m.12 views

WordPress Theater for WordPress Plugin <= 0.18.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Theater for WordPress Type Plugin Vulnerable versions = 0.18.6.2 Fixed in 0.18.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11371 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID eefcdf2d420d Credits vgo0...

6.1CVSS5.8AI score0.01633EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder