Lucene search
+L

273064 matches found

Patchstack
Patchstack
added 2026/08/18 9:33 a.m.10 views

WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...

6.5CVSS5.1AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 9:32 a.m.12 views

WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.10...

6.5CVSS5.1AI score0.00211EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 9:32 a.m.10 views

WordPress WPZOOM Forms – Contact Form Plugin for Gutenberg plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WPZOOM Forms – Contact Form Plugin for Gutenberg versions = 2.0.5...

6.5CVSS5.1AI score0.00211EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 9:31 a.m.7 views

WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Login With Ajax versions = 4.5.1...

6.5CVSS5.1AI score0.00211EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 9:29 a.m.9 views

WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Video Conferencing with Zoom versions = 4.6.8...

6.5CVSS5.1AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 9:15 a.m.7 views

WordPress Wufoo Shortcode plugin <= 1.55 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Wufoo Shortcode versions = 1.55...

6.5CVSS5.1AI score0.00211EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 9:14 a.m.9 views

WordPress Typing Effect plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Typing Effect versions = 1.3.7...

6.5CVSS5.1AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 9:11 a.m.6 views

WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Tab Widget versions = 1.2.11...

6.5CVSS5.1AI score0.00211EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 8:52 a.m.9 views

WordPress GeoDirectory plugin <= 2.8.175 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin GeoDirectory versions = 2.8.175...

6.5CVSS5.1AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/18 8:30 a.m.8 views

WordPress Frontend Admin by DynamiApps plugin <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter vulnerability

Unauthenticated Privilege Escalation via 'itemid' Parameter vulnerability discovered by 밥김국 - DDADDA in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.9...

9.8CVSS5.3AI score0.00448EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/18 6:16 a.m.7 views

CVE-2026-75091

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.2CVSS0.00194EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/18 6:16 a.m.15 views

CVE-2026-15748

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handlefileupload function. This is due to insufficient file type validation in handlefileupload, where the dangerous-extension blocklist performs exact-key matchin...

9.8CVSS0.03452EPSS
SaveExploits4References7
Cvelist
Cvelist
added 2026/08/18 5:31 a.m.28 views

CVE-2026-75091 Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.2CVSS0.00194EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/18 5:31 a.m.27 views

CVE-2026-75091

The Quill Forms WordPress plugin (versions ≤ 5.7.1) has a stored XSS flaw from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts that execute when users view affected pages. CVSS 7.2 HIGH; no confirmed in-the-wild exploitation reported. Patc...

7.2CVSS5.5AI score0.00194EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/18 5:31 a.m.253 views

CVE-2026-15748

Wordfence analysis confirms an unauthenticated attacker can chain a forged Select-field record with the regex-compatible ph(p)|text/x-php pattern to bypass the forminator_allowed_mime_types() exact-key blocklist, upload executable PHP, and achieve RCE on sites with a custom upload root lacking .h...

9.8CVSS6.7AI score0.03452EPSS
SaveExploits4References7
EUVD
EUVD
added 2026/08/18 5:31 a.m.11 views

EUVD-2026-60569

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handlefileupload function. This is due to insufficient file type validation in handlefileupload, where the dangerous-extension blocklist performs exact-key matchin...

9.8CVSS6.7AI score0.03452EPSS
SaveExploits4References7
EUVD
EUVD
added 2026/08/18 5:31 a.m.10 views

EUVD-2026-60570

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.2CVSS5.5AI score0.00194EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/18 3:16 a.m.13 views

CVE-2026-11801

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

7.5CVSS0.003EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/18 2:27 a.m.11 views

EUVD-2026-60568

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

7.5CVSS5.2AI score0.003EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/18 2:27 a.m.27 views

CVE-2026-11801

The WPAdverts WordPress plugin (≤2.3.2) exposes a missing-authorization flaw in the classifieds-types REST endpoint (class-rest-blocks.php). Unauthenticated attackers can retrieve internal config: post types, taxonomies, form metadata, contact options, and custom field keys. CVSS 7.5 (HIGH). Patc...

7.5CVSS5.2AI score0.003EPSS
SaveExploits0References5
Rows per page
Query Builder