PT-2025-46295

Name of the Vulnerable Software and Affected Versions Chart Expert plugin for WordPress versions prior to 1.1 Description The Chart Expert plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'pmzez chart' shortcode. This is a result of inadequate input sanitization and...

CVE-2025-12753: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

The Chart Expert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmzezchart' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes. This makes it possible for...

[SECURITY] Fedora 42 Update: qt5-qtcharts-5.15.18-1.fc42

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

CVE-2025-11820

The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...

CVE-2025-11820

CVE-2025-11820 concerns the Graphina – Elementor Charts and Graphs plugin for WordPress, affected up to version 3.1.8. The issue is a Stored Cross‑Site Scripting (XSS) vulnerability caused by insufficient input sanitization and output escaping on data attributes, enabling an authenticated attacke...

CVE-2025-11820 Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets

The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...

CVE-2025-11820 Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets

The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...

CVE-2025-11841

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress Greenshift plugin <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Chart Data Attributes vulnerability discovered by Webbernaut in WordPress Plugin Greenshift versions = 12.2.7...

CVE-2025-11841

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-11841 Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-11841

CVE-2025-11841 (Greenshift – animation and page builder blocks) affects Greenshift for WordPress up to and including version 12.2.7. The vulnerability is a stored XSS via Chart Data attributes caused by insufficient input sanitization and output escaping. It requires authenticated access at Contr...

PT-2025-44914

Name of the Vulnerable Software and Affected Versions Greenshift – animation and page builder blocks versions up to and including 12.2.7 Description The Greenshift plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Chart Data attributes. Insufficient input sanitization...

CVE-2025-11841: Improper Neutralization of Input During Web Page Generation

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

Malicious Package

Overview radial-chart is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: runc, gotestsum, terraform-docs, cert-exporter, helm-docs, wait-for-port, tfsec, mods, sriov-network-device-plugin, mongo-tools, go-bindata, oauth2-proxy, distribution, pvc-autoresizer, s5cmd, cert-manager-cmctl, sbom-convert, vexctl, dockerize, go-md2man, age, incer...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: tfsec, mongo-tools, pvc-autoresizer, sbom-convert, dockerize, age, timescaledb-parallel-copy, pulumi-language-java, speedtest-go, fq, hivemind, wireguard-go, dfc, pgpool2exporter, fluent-bit-plugin-loki, trivy, gitleaks, flannel, nuclei, tofu-controller,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: runc, gotestsum, terraform-docs, cert-exporter, helm-docs, wait-for-port, tfsec, mods, sriov-network-device-plugin, mongo-tools, go-bindata, oauth2-proxy, distribution, pvc-autoresizer, s5cmd, cert-manager-cmctl, sbom-convert, vexctl, dockerize, go-md2man, age, incer...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: runc, gotestsum, terraform-docs, cert-exporter, helm-docs, wait-for-port, tfsec, mods, sriov-network-device-plugin, mongo-tools, go-bindata, oauth2-proxy, distribution, pvc-autoresizer, s5cmd, cert-manager-cmctl, sbom-convert, vexctl, dockerize, go-md2man, age, incer...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, packer-fips, pgpool2exporter, etcd-fips, stampdalf, tfsec, kubeflow-katib, direnv, protoc-gen-go, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, dragonfly-operator-fips,...