4.3

CVSS3.1

CVE-2025-66101 - WordPress CBX Bookmark & Favorite plugin <= 2.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sabuj Kundu CBX Bookmark & Favorite cbxwpbookmark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CBX Bookmark & Favorite: from n/a through <= 2.0.1.

πŸ“… Published: Nov. 21, 2025, 12:30 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 4:16 p.m.

5.3

CVSS3.1

CVE-2025-66099 - WordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeAtelier Chat Help chat-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chat Help: from n/a through <= 3.1.3.

πŸ“… Published: Nov. 21, 2025, 12:30 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 5:15 p.m.

6.5

CVSS3.1

CVE-2025-66098 - WordPress Travelers' Map plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through <= 2.3.2.

πŸ“… Published: Nov. 21, 2025, 12:30 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 5:15 p.m.

4.3

CVSS3.1

CVE-2025-66097 - WordPress I Order Terms plugin <= 1.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Igor Jerosimić I Order Terms i-order-terms allows Cross Site Request Forgery.This issue affects I Order Terms: from n/a through <= 1.5.0.

πŸ“… Published: Nov. 21, 2025, 12:29 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 5:15 p.m.

0.0

CVE-2025-66096 - WordPress Table Block by Tableberg plugin <= 0.6.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Imtiaz Rayhan Table Block by Tableberg tableberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Table Block by Tableberg: from n/a through <= 0.6.9.

πŸ“… Published: Nov. 21, 2025, 12:29 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 3:13 p.m.

0.0

CVE-2025-66095 - WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows SQL Injection.This issue affects KiviCare: from n/a through <= 3.6.13.

πŸ“… Published: Nov. 21, 2025, 12:29 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 3:13 p.m.

0.0

CVE-2025-66093 - WordPress Extensions for Leaflet Map plugin <= 4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a through <= 4.8.

πŸ“… Published: Nov. 21, 2025, 12:29 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 3:13 p.m.

0.0

CVE-2025-66092 - WordPress Accordion Slider plugin <= 1.9.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bqworks Accordion Slider accordion-slider allows Stored XSS.This issue affects Accordion Slider: from n/a through <= 1.9.13.

πŸ“… Published: Nov. 21, 2025, 12:29 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 3:13 p.m.

6.5

CVSS3.1

CVE-2025-66091 - WordPress Stylish Cost Calculator plugin <= 8.1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows DOM-Based XSS.This issue affects Stylish Cost Calculator: from n/a through <= 8.1.5.

πŸ“… Published: Nov. 21, 2025, 12:29 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 6:15 p.m.

6.5

CVSS3.1

CVE-2025-66090 - WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.5.

πŸ“… Published: Nov. 21, 2025, 12:29 p.m. πŸ”„ Last Modified: Nov. 21, 2025, 5:15 p.m.
Total resulsts: 319165
Page 10 of 31,917
Β« previous page Β» next page
Filters