Lucene search
K

190 matches found

Cvelist
Cvelist
added 2023/04/06 8:4 a.m.17 views

CVE-2023-24002 WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin = 2.6.3 versions...

5.9CVSS5.5AI score0.00392EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/06 8:4 a.m.11 views

CVE-2023-24002 WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin = 2.6.3 versions...

5.9CVSS5.6AI score0.00392EPSS
Exploits0References1
CVE
CVE
added 2023/04/06 8:4 a.m.46 views

CVE-2023-24002

CVE-2023-24002 affects the WordPress plugin YouTube Embed, Playlist and Popup by WpDevArt, specifically versions up to 2.6.3. The vulnerability is an authenticated (admin+) Stored XSS in the plugin. Root cause details are not expanded beyond the description, but the issue is mitigated by upgradin...

5.9CVSS5AI score0.00392EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/06 8:0 a.m.11 views

CVE-2023-24004 WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin = 2.1.5 versions...

5.9CVSS5.4AI score0.00392EPSS
Exploits0References1
CVE
CVE
added 2023/04/06 8:0 a.m.52 views

CVE-2023-24004

The CVE-2023-24004 entry concerns a Stored XSS in the WordPress plugin WPdevart Image and Video Lightbox, Image PopUp, affecting versions

5.9CVSS4.9AI score0.00392EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/04/06 6:15 a.m.2 views

CVE-2023-23972

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

4.8CVSS5.8AI score0.00392EPSS
Exploits0References1
NVD
NVD
added 2023/04/06 6:15 a.m.21 views

CVE-2023-23972

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

5.9CVSS5.4AI score0.00392EPSS
Exploits0References1
Prion
Prion
added 2023/04/06 6:15 a.m.12 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

4.3CVSS4.9AI score0.00392EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/06 5:50 a.m.7 views

CVE-2023-23972 WordPress Social Like Box and Page by WpDevArt Plugin <= 0.8.39 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

5.9CVSS5.8AI score0.00392EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/04/06 5:50 a.m.40 views

CVE-2023-23972 WordPress Social Like Box and Page by WpDevArt Plugin <= 0.8.39 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

5.9CVSS5.5AI score0.00392EPSS
Exploits0References1
CVE
CVE
added 2023/04/06 5:50 a.m.35 views

CVE-2023-23972

CVE-2023-23972 concerns the WordPress plugin “Social Like Box and Page by WpDevArt” (Smplug-in) up to version 0.8.39. The issue is a stored XSS vulnerability that requires admin+ privileges to exploit. The underlying cause is improper sanitization/escaping in the plugin’s inputs, enabling a high-...

5.9CVSS4.9AI score0.00392EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/06 12:0 a.m.3 views

WordPress plugin Social Like Box and Page by WpDevArt 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5AI score0.00392EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/06 12:0 a.m.4 views

PT-2023-19327 · Wpdevart · Smplug-In Social Like Box/Page By Wpdevart

Name of the Vulnerable Software and Affected Versions: Smplug-in Social Like Box and Page by WpDevArt plugin versions 0.8.39 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For...

5.9CVSS4.8AI score0.00392EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/06 12:0 a.m.5 views

WordPress plugin YouTube Embed, Playlist and Popup by WpDevArt 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5AI score0.00392EPSS
Exploits0References2
OSV
OSV
added 2023/04/04 1:15 p.m.1 views

CVE-2023-23870

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in wpdevart Responsive Vertical Icon Menu plugin = 1.5.8 versions...

4.8CVSS5.8AI score0.00392EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/04 12:44 p.m.7 views

CVE-2023-23870 WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in wpdevart Responsive Vertical Icon Menu plugin = 1.5.8 versions...

5.9CVSS5.6AI score0.00392EPSS
Exploits0References1
CVE
CVE
added 2023/04/04 12:44 p.m.40 views

CVE-2023-23870

CVE-2023-23870 affects the WordPress plugin wpdevart Responsive Vertical Icon Menu (versions ≤ 1.5.8). The vulnerability is a Stored Cross-Site Scripting (XSS) that requires authentication with admin or higher privileges. The issue stems from the plugin’s handling of input in its menu/icon functi...

5.9CVSS5AI score0.00392EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/04 12:0 a.m.3 views

PT-2023-19269 · Wpdevart · Wpdevart Responsive Vertical Icon Menu Plugin

Name of the Vulnerable Software and Affected Versions: wpdevart Responsive Vertical Icon Menu plugin versions 1.5.8 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication with admin or higher privileges...

5.9CVSS4.8AI score0.00392EPSS
Exploits0References4
OSV
OSV
added 2023/03/29 7:15 p.m.4 views

CVE-2022-47603

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin = 2.0.1 versions...

6.1CVSS5.8AI score0.00422EPSS
Exploits0References1
NVD
NVD
added 2023/03/29 7:15 p.m.25 views

CVE-2022-47603

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin = 2.0.1 versions...

7.1CVSS6.3AI score0.00422EPSS
Exploits0References1
Rows per page
Query Builder