Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

37 matches found

Patchstack
Patchstack•added 2026/05/21 2:37 p.m.•2 views

WordPress KIA Subtitle plugin <= 4.0.1 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')] vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability discovered by zaim in WordPress Plugin KIA Subtitle versions = 4.0.1...

6.4CVSS5.8AI score0.00013EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/05/19 12:4 p.m.•5 views

WordPress Sticky plugin <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Sticky versions = 2.5.6...

6.4CVSS5.8AI score0.00036EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/05/11 7:7 p.m.•2 views

WordPress SP Blog Designer plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin SP Blog Designer versions = 1.0.0...

6.4CVSS5.8AI score0.00032EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/05/07 9:24 p.m.•5 views

WordPress NMR Strava activities plugin <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin NMR Strava activities versions = 1.0.14...

6.4CVSS5.8AI score0.00013EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/05/01 2:45 p.m.•1 views

WordPress Simple Link Directory plugin <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Simple Link Directory versions = 8.9.2...

6.4CVSS5.8AI score0.00046EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/04/07 10:57 p.m.•2 views

WordPress LatePoint plugin <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zaim in WordPress Plugin LatePoint versions = 5.3.0...

6.4CVSS5.9AI score0.00015EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/03/23 7:31 p.m.•2 views

WordPress Multi Post Carousel by Category plugin <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'slides' Shortcode Attribute vulnerability discovered by zaim in WordPress Plugin Multi Post Carousel by Category versions = 1.4...

6.4CVSS5.8AI score0.00043EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/03/23 6:21 p.m.•2 views

WordPress Any Post Slider plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_type' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'posttype' Shortcode Attribute vulnerability discovered by zaim in WordPress Plugin Any Post Slider versions = 1.0.4...

6.4CVSS5.8AI score0.00045EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/07 12:5 a.m.•5 views

WordPress Simple Bible Verse via Shortcode plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zaim in WordPress Plugin Simple Bible Verse via Shortcode versions = 1.1...

6.4CVSS5.3AI score0.00014EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 5:28 a.m.•2 views

WordPress Smart PopUp Blaster plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Smart PopUp Blaster versions = 1.4.3...

6.4CVSS5.3AI score0.00233EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/01/30 4:17 a.m.•7 views

WordPress CubeWP plugin <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via cubewpshortcodetaxonomy Shortcode vulnerability discovered by zaim in WordPress Plugin CubeWP versions = 1.1.26...

6.4CVSS5.9AI score0.00052EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/01/24 3:8 a.m.•6 views

WordPress Administrative Shortcodes plugin <= 0.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'login' and 'logout' Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'login' and 'logout' Shortcode Attributes vulnerability discovered by zaim in WordPress Plugin Administrative Shortcodes versions = 0.3.4...

6.4CVSS5.4AI score0.00016EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2026/01/23 7:38 a.m.•4 views

WordPress Uncanny Automator plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zaim in WordPress Plugin Uncanny Automator versions = 6.10.0.2...

6.4CVSS5.4AI score0.00016EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/31 12:0 a.m.•2 views

WordPress Sermon Manager plugin <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Sermon Manager versions = 2.30.0...

6.4CVSS5.9AI score0.00031EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/31 12:0 a.m.•2 views

WordPress WishSuite plugin <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'buttontext' Shortcode Attribute vulnerability discovered by zaim in WordPress Plugin WishSuite versions = 1.5.1...

6.4CVSS5.9AI score0.00037EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/26 6:8 p.m.•2 views

WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Cool Tag Cloud versions = 2.29...

6.1AI score0.00045EPSS
Exploits0Affected Software1
Patchstack
Patchstack•added 2025/11/27 7:45 p.m.•2 views

WordPress FireBox plugin <= 3.1.0-free - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin FireBox versions = 3.1.0-free...

6.5CVSS6.1AI score0.00029EPSS
Exploits0Affected Software1
Patchstack
Patchstack•added 2025/11/23 7:59 p.m.•4 views

WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Groundhogg versions = 4.2.6...

6.5CVSS6.1AI score0.00031EPSS
Exploits0Affected Software1
Patchstack
Patchstack•added 2025/10/15 12:30 a.m.•2 views

WordPress Quick Social Login plugin <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Quick Social Login versions = 1.4.6...

6.4CVSS5.7AI score0.00032EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack•added 2025/08/24 10:24 a.m.•4 views

WordPress WP Last Modified Info plugin <= 1.9.4 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by zaim in WordPress Plugin WP Last Modified Info versions = 1.9.4...

7.4CVSS7.4AI score0.00049EPSS
Exploits0Affected Software1
Rows per page
Query Builder