Filter
-Infinity
0
Trending
KingComposertagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
6.4
EPSS
0.03%
First published (updated )
tagDiv Opt-In BuildertagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter
6.5
First published (updated )
KingComposerTagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
9.8
First published (updated )
KingComposertagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
First published (updated )
KingComposertagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
6.1
EPSS
0.06%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Tagdiv ComposertagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
6.1
First published (updated )
Tagdiv ComposertagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
6.1
First published (updated )
Tagdiv ComposertagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
8.8
First published (updated )
Tagdiv NewspaperNewspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
5.5
First published (updated )
Tagdiv ComposertagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
KingComposertagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
6.4
EPSS
0.04%
First published (updated )
Tagdiv ComposerWordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)
7.1
First published (updated )
Tagdiv ComposertagDiv Composer < 4.2 - Admin+ Stored XSS
4.8
First published (updated )
Tagdiv ComposertagDiv Composer < 4.2 - Unauthenticated Stored XSS
6.1
First published (updated )
tagDiv Cloud LibrarytagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
tagDiv ComposertagDiv Composer < 4.0 - Reflected Cross-site Scripting
6.1
First published (updated )
Tagdiv NewspaperNewspaper < 12 - Reflected Cross-Site Scripting
6.1
First published (updated )
Tagdiv NewspaperNewspaper < 12 - Reflected Cross-Site Scripting
6.1
First published (updated )
NewsmagNewsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Tagdiv NewspaperThe newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_upda…
9.8
First published (updated )
Tagdiv NewspaperThe newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax…
9.8
First published (updated )