Lucene search
K

27 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/25 9:56 p.m.8 views

CVE-2026-27398

Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RSVP and Event Management: from n/a through 2.7.16...

5.3CVSS5.8AI score0.00231EPSS
Exploits0References2
NVD
NVD
added 2026/05/20 1:16 p.m.10 views

CVE-2026-27424

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS0.00213EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/22 1:22 a.m.5 views

CVE-2026-39486

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through = 5.1.8...

8.5CVSS5.8AI score0.00256EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/13 7:24 p.m.2 views

CVE-2026-39536

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through = 2.7.16...

5.3CVSS5.8AI score0.0024EPSS
Exploits0References1
NVD
NVD
added 2026/04/08 9:16 a.m.6 views

CVE-2026-39486

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through = 5.1.8...

8.5CVSS0.00256EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.5 views

CVE-2026-39486

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through = 5.1.8...

5.9AI score0.00256EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/04 7:28 p.m.3 views

CVE-2026-25036

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through = 4.2.25...

6.5CVSS5.3AI score0.00296EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.3 views

CVE-2026-24389

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.2...

6.5CVSS5.4AI score0.00129EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-40221

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00246EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-31879

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00374EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-9804

Malicious code in bioql PyPI...

4.3CVSS6.2AI score0.00345EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.4 views

CVE-2025-57926

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through = 4.2.18...

6.5CVSS5.9AI score0.00209EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:28 a.m.4 views

CVE-2024-43329

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a through 1.2.7...

6.5CVSS6.8AI score0.00246EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:50 a.m.7 views

CVE-2023-28171

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in WP Chill Brilliance theme = 1.3.1 versions...

5.4CVSS5.6AI score0.00374EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/09 3:23 p.m.3 views

CVE-2025-47439

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through = 5.0.22...

7.5CVSS7.2AI score0.0069EPSS
Exploits0References1
NVD
NVD
added 2025/05/07 3:15 p.m.4 views

CVE-2025-47439

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through = 5.0.22...

7.5CVSS0.0069EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 2:19 p.m.45 views

CVE-2025-47439

CVE-2025-47439 affects the WordPress plugin Download Monitor (versions through 5.0.22). Risk stems from improper control of filenames used in Include/Require, enabling Local File Inclusion via PHP Remote File Inclusion. CVSS v3.1 base score 7.5 (HIGH); attack vector NETWORK, access complexity HIG...

7.5CVSS7.2AI score0.0069EPSS
Exploits0References1
NVD
NVD
added 2025/04/04 4:15 p.m.3 views

CVE-2025-32233

Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through = 2.0.3...

4.3CVSS0.00345EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/27 2:33 p.m.3 views

CVE-2025-26975

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Strong Testimonials: from n/a through = 3.2.3...

5.3CVSS7.2AI score0.00354EPSS
Exploits0References1
NVD
NVD
added 2025/02/25 3:15 p.m.5 views

CVE-2025-26975

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Strong Testimonials: from n/a through = 3.2.3...

5.3CVSS0.00354EPSS
Exploits0References1
Rows per page
Query Builder