Skip to main content
CVE-2025-60138 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks allows Stored XSS.5. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-60124 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Hellyer Simple Colorbox allows Stored XSS.6.1. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-60112 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi aThemes Addons for Elementor allows Stored XSS.1.3. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-60105 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in metaphorcreations Ditty allows Stored XSS.1.58. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-60102 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syam Mohan WPFront User Role Editor allows Stored XSS.2.3. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-60099 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awsm.in Embed Any Document allows Stored XSS.7.7. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-60040 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fkrauthan wp-mpdf allows Stored XSS.9.1. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-58917 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Verwymeren Quantities and Units for WooCommerce allows Stored XSS.0.13. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-27006 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeplugs Authorsy allows Stored XSS.0.5. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-10989 Sep 26, 01:15 LOW POC Monitor

A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Ruoyi
NVD VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-11048 Sep 26, 22:15 LOW POC Monitor

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure I Educar Portabilis
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-11047 Sep 26, 22:15 LOW POC Monitor

A weakness has been identified in Portabilis i-Educar up to 2.10. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure I Educar Portabilis
NVD VulDB GitHub
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-10981 Sep 26, 00:15 LOW POC Monitor

A vulnerability was detected in JeecgBoot up to 3.8.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Jeecg Boot Jeecg
NVD VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-10980 Sep 26, 00:15 LOW POC Monitor

A security vulnerability has been detected in JeecgBoot up to 3.8.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Jeecg Boot Jeecg
NVD VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-11029 Sep 26, 17:15 LOW POC Monitor

A weakness has been identified in givanz Vvveb up to 1.0.7.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Vvveb
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-11041 Sep 26, 20:15 LOW POC Monitor

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Open Source Job Portal Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-11035 Sep 26, 19:15 LOW POC Monitor

A vulnerability was determined in Jinher OA 2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XXE Jinher Oa Jinher
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-6396 Sep 26, 15:16 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting (XSS).07.14. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS
NVD VulDB
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-11026 Sep 26, 15:16 LOW POC Monitor

A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Vvveb
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-10995 Sep 26, 02:15 LOW POC PATCH GHSA Monitor

A security vulnerability has been detected in Open Babel up to 3.1.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Open Babel Babel Openbabel
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11017 Sep 26, 14:15 LOW POC Monitor

A vulnerability was detected in OGRECave Ogre up to 14.4.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Ogre
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-10999 Sep 26, 03:15 LOW POC PATCH GHSA Monitor

A vulnerability was found in Open Babel up to 3.1.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Open Babel Babel Openbabel
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-10998 Sep 26, 03:15 LOW POC PATCH GHSA Monitor

A vulnerability has been found in Open Babel up to 3.1.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Open Babel Babel Openbabel
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-10997 Sep 26, 03:15 LOW POC PATCH GHSA Monitor

A flaw has been found in Open Babel up to 3.1.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Open Babel Babel Openbabel
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-10996 Sep 26, 03:15 LOW POC PATCH GHSA Monitor

A vulnerability was detected in Open Babel up to 3.1.1.cpp. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Open Babel Babel Openbabel
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-10994 Sep 26, 02:15 LOW POC PATCH GHSA Monitor

A weakness has been identified in Open Babel up to 3.1.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Open Babel Babel Openbabel
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11014 Sep 26, 13:15 LOW POC Monitor

A security flaw has been discovered in OGRECave Ogre up to 14.4.1.cpp of the component Image Handler. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Ogre
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-60186 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Moss Google+ Comments allows Stored XSS.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Google Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60185 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kontur.us kontur Admin Style allows Stored XSS.0.4. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60184 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry L. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60179 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Space Studio Click & Tweet allows Stored XSS.8.9. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60177 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rozx Recaptcha – wp allows Stored XSS.2.6. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60160 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sharkthemes Smart Related Products allows Stored XSS.0.5. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60158 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webmaniabr Nota Fiscal Eletrônica WooCommerce allows Stored XSS.4.0.6. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60154 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jennifer Moss MWW Disclaimer Buttons allows Stored XSS.41. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60149 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Ott Notely allows Stored XSS.8.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60146 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amit Verma Map Categories to Pages allows Stored XSS.3.2. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60144 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Lenix scss compiler allows Stored XSS.2. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60141 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thetechtribe The Tribal allows Stored XSS.3.3. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60136 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cartpauj User Notes allows Stored XSS.0.2. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60133 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DJ-Extensions.com PE Easy Slider allows Stored XSS.1.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60104 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery Custom Links allows Stored XSS.2.5. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-60101 Sep 26, 09:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Woostify Woostify allows Stored XSS.4.2. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Theme
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-11027 Sep 26, 16:15 LOW POC Monitor

A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Vvveb
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11012 Sep 26, 12:15 LOW POC PATCH Monitor

A vulnerability was determined in BehaviorTree up to 4.7.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available.

Buffer Overflow Behaviortree
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11011 Sep 26, 12:15 LOW POC PATCH Monitor

A vulnerability was found in BehaviorTree up to 4.7.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available.

Denial Of Service Behaviortree
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11013 Sep 26, 13:15 LOW POC Monitor

A vulnerability was identified in BehaviorTree up to 4.7.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Behaviortree
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11000 Sep 26, 04:15 LOW POC PATCH GHSA Monitor

A vulnerability was determined in Open Babel up to 3.1.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Open Babel Babel Openbabel
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11010 Sep 26, 11:15 LOW POC Monitor

A vulnerability has been found in vstakhov libucl up to 0.9.2. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-11015 Sep 26, 14:15 LOW POC Monitor

A weakness has been identified in OGRECave Ogre up to 14.4.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
Prev Page 2 of 5 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy