Lucene search
+L

33640 matches found

Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•51 views

CVE-2025-60083 WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS0.00431EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 7:22 a.m.•34 views

CVE-2025-60083

CVE-2025-60083 affects the WordPress plugin “PDF Invoice Builder for WooCommerce” (WordPress/WooCommerce). Connected sources confirm a deserialization of untrusted data vulnerability that allows object injection in versions up to 6.3.2 (other references discuss related versions up to 6.5.0). The ...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 7:22 a.m.•9 views

CVE-2025-60083 WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 7:22 a.m.•12 views

CVE-2025-60082 WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 7:22 a.m.•17 views

CVE-2025-60084 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•45 views

CVE-2025-60082 WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.5.0...

8.8CVSS0.00431EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/18 3:15 a.m.•17 views

CVE-2025-12885

The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sanitizepdfsrc function regex bypass in all versions up to, and including, 2.7.10 due to insufficient input sanitization and output escaping. This makes i...

6.4CVSS0.00255EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/18 1:51 a.m.•48 views

CVE-2025-12885

CVE-2025-12885 is a Stored Cross-Site Scripting vulnerability in the WordPress plugin Embed Any Document (Embed PDF, Word, PowerPoint, Excel Files). Affected versions: all up to 2.7.10, per Wordfence; the issue arises from insufficient input sanitization and output escaping in sanitize_pdf_src. E...

6.4CVSS6.1AI score0.00255EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•17 views

WordPress plugin PDF Invoice Builder for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

8.8CVSS6.6AI score0.00431EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•26 views

PT-2025-52142

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.3.1...

7AI score0.00431EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•22 views

PT-2025-52174

Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact Form 7 PDF, Google Sheet & Database rtwwcfp-wordpress-contact-form-7-pdf allows Using Malicious Files.This issue affects WordPress Contact Form 7 PDF, Google Sheet & Database: from n/a through =...

6.9AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•20 views

PT-2025-52139

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affects PDF for Contact Form 7: from n/a through = 6.3.4...

7AI score0.00431EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•10 views

CVE-2025-60084: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•8 views

CVE-2025-60081: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affects PDF for Contact Form 7: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•5 views

CVE-2025-60083: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•21 views

WordPress plugin PDF for Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.5AI score0.00431EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-53000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6...

8.5CVSS6AI score0.0026EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•4 views

SUSE SLED15 / SLES15 Security Update : poppler (SUSE-SU-2025:4439-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4439-1 advisory. - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap bsc1252337 Tenable...

2.1CVSS6AI score0.0017EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•19 views

WordPress plugin WordPress Contact Form 7 PDF 安全漏洞

...

9.9CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•4 views

SUSE SLED15: libpoppler-cpp0 / libpoppler-cpp0-32bit / libpoppler-devel / etc (SUSE-SU-2025:4434-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4434-1 advisory. - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap...

2.1CVSS6AI score0.0017EPSS
SaveExploits0References4
Rows per page
Query Builder