Lucene search
+L

16681 matches found

CVE
CVE
added 2024/12/02 1:48 p.m.49 views

CVE-2024-53720

CVE-2024-53720 describes a Cross-Site Request Forgery leading to Stored XSS in the WordPress WP-ISPConfig 3 plugin (vulnerable:

7.1CVSS7.2AI score0.00173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 1:48 p.m.11 views

CVE-2024-53720 WordPress WP-ISPConfig 3 plugin <= 1.5.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ole1986 , MachineITSvcs WP-ISPConfig 3 allows Stored XSS.This issue affects WP-ISPConfig 3: from n/a through 1.5.6...

7.1CVSS6.8AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 1:48 p.m.63 views

CVE-2024-53761

CVE-2024-53761 is a CSRF vulnerability affecting WP Revisions Manager

5.4CVSS7.2AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/02 12:00 a.m.16 views

WordPress plugin WP e-Commerce Style Email 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.6AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/01 10:15 p.m.40 views

CVE-2024-53748

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Mermaid wp-mermaid allows Stored XSS.This issue affects WP Mermaid: from n/a through = 1.0.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/01 9:23 p.m.80 views

CVE-2024-53748

CVE-2024-53748 affects the WordPress WP Mermaid plugin (versions

6.5CVSS7.2AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/01 12:00 a.m.23 views

PT-2024-35857 · WordPress · Wp Mermaid

Name of the Vulnerable Software and Affected Versions: WP Mermaid versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious scripts into the...

6.5CVSS8.8AI score0.00239EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/01 12:00 a.m.12 views

WordPress plugin WP Mermaid 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.5CVSS8AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/30 10:15 p.m.21 views

CVE-2024-53774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jakub Glos Sparkle Elementor Kit sparkle-elementor-kit allows DOM-Based XSS.This issue affects Sparkle Elementor Kit: from n/a through = 2.0.9...

6.5CVSS0.00294EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/30 10:15 p.m.24 views

CVE-2024-53757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SocialEvolution WP Find Your Nearest wp-find-your-nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through = 0.3.1...

6.5CVSS0.00288EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/30 10:15 p.m.14 views

CVE-2024-53758

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP MathJax wp-mathjax-plus allows Stored XSS.This issue affects WP MathJax: from n/a through = 1.0.1...

6.5CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/30 9:53 p.m.58 views

CVE-2024-53757

CVE-2024-53757 refers to a stored Cross-Site Scripting vulnerability in the WordPress plugin “WP Find Your Nearest” (SocialEvolution). Affected versions are WP Find Your Nearest 0.3.1 and earlier. Root cause per sources: improper neutralization of input during web page generation, enabling stored...

6.5CVSS7.2AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/30 9:52 p.m.56 views

CVE-2024-53758

CVE-2024-53758 describes a Stored XSS in the WordPress WP MathJax plugin

6.5CVSS7.2AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/30 9:52 p.m.11 views

CVE-2024-53758 WordPress WP MathJax plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP MathJax wp-mathjax-plus allows Stored XSS.This issue affects WP MathJax: from n/a through = 1.0.1...

6.5CVSS8.6AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/28 11:15 a.m.42 views

CVE-2024-53737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through = 1.8.16.0...

6.5CVSS0.00299EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/28 11:15 a.m.23 views

CVE-2024-53732

Cross-Site Request Forgery CSRF vulnerability in wpwox Footer Flyout Widget footer-flyout-widget allows Stored XSS.This issue affects Footer Flyout Widget: from n/a through = 1.1...

7.1CVSS0.00173EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/28 11:15 a.m.16 views

CVE-2024-11402

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...

7.1CVSS0.00334EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/28 11:03 a.m.75 views

CVE-2024-53732

CVE-2024-53732 concerns the WordPress plugin Footer Flyout Widget, version

7.1CVSS7.2AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/28 11:00 a.m.47 views

CVE-2024-11402

CVE-2024-11402 corresponds to WordPress Block Editor Bootstrap Blocks plugin (

7.1CVSS7.2AI score0.00334EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/28 10:55 a.m.70 views

CVE-2024-53737

CVE-2024-53737 concerns the WP Mailster WordPress plugin. Affected versions: WP Mailster

6.5CVSS7.2AI score0.00299EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder