WordPress DP ALTerminator - Missing ALT manager Plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

WordPress DP ALTerminator - Missing ALT manager Plugin = 1.0.2 - Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin DP ALTerminator - Missing ALT manager versions = 1.0.2...

WordPress Frontpage category filter plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Frontpage category filter versions = 1.0.2...

CVE-2025-28943

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mylo2h2s DP ALTerminator - Missing ALT manager dp-alterminator-missing-alt-manager allows Stored XSS.This issue affects DP ALTerminator - Missing ALT manager: from n/a through = 1.0.2...

CVE-2025-28867

Cross-Site Request Forgery CSRF vulnerability in stesvis Frontpage category filter allows Cross Site Request Forgery. This issue affects Frontpage category filter: from n/a through 1.0.2...

CVE-2025-28867

Cross-Site Request Forgery CSRF vulnerability in stesvis Frontpage category filter frontpage-category-filter allows Cross Site Request Forgery.This issue affects Frontpage category filter: from n/a through = 1.0.2...

CVE-2025-28943 WordPress DP ALTerminator - Missing ALT manager Plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mylo2h2s DP ALTerminator - Missing ALT manager dp-alterminator-missing-alt-manager allows Stored XSS.This issue affects DP ALTerminator - Missing ALT manager: from n/a through = 1.0.2...

CVE-2025-28943

CVE-2025-28943 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “DP ALTerminator – Missing ALT manager.” The issue arises from improper input neutralization during web page generation, allowing stored XSS. Affected versions are up to 1.0.2 (n/a through 1.0.2). C...

CVE-2025-28867

CVE-2025-28867 is a CSRF vulnerability in the WordPress Frontpage category filter plugin, affecting versions up to 1.0.2. NVD lists CVSS v3.1 base score 8.8 (HIGH), with network attack vector, no privileges required, but user interaction is required. PatchStack notes the CSRF issue for 1.0.2. No ...

CVE-2025-28867 WordPress Frontpage category filter plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in stesvis Frontpage category filter frontpage-category-filter allows Cross Site Request Forgery.This issue affects Frontpage category filter: from n/a through = 1.0.2...

CVE-2025-28867 WordPress Frontpage category filter plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in stesvis Frontpage category filter frontpage-category-filter allows Cross Site Request Forgery.This issue affects Frontpage category filter: from n/a through = 1.0.2...

WordPress plugin Frontpage category filter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-16890 · Tp Link · Tp-Link M7450

Name of the Vulnerable Software and Affected Versions: TP-Link M7450 4G LTE Mobile Wi-Fi Router Firmware version 1.0.2 Build 170306 Rel.1015n Description: A SQL Injection vulnerability exists, allowing an unauthenticated attacker to inject malicious SQL statements via the username and password...

Linux Distros Unpatched Vulnerability : CVE-2020-1968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have...

CVE-2025-23536

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mndpsingh287 Track Page Scroll track-page-scroll allows Reflected XSS.This issue affects Track Page Scroll: from n/a through = 1.0.2...

CVE-2025-25162

The CVE-2025-25162 entry concerns WordPress Sports Rankings and Lists plugin (versions up to 1.0.2; CVE-2025-25162) with an Arbitrary File Download vulnerability via path traversal. Public sources (Wordfence, CVE records) indicate the vulnerability affects Sports Rankings and Lists and is current...

CVE-2025-23739

CVE-2025-23739 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin WP Ultimate Reviews FREE (NotFound) affecting versions up to 1.0.2. The issue results from improper neutralization of input during web page generation. The available documents confirm the vulnerability and im...

CVE-2025-23536

CVE-2025-23536: WordPress Track Page Scroll plugin

CVE-2025-23536 WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mndpsingh287 Track Page Scroll track-page-scroll allows Reflected XSS.This issue affects Track Page Scroll: from n/a through = 1.0.2...

WordPress plugin Track Page Scroll 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2025-27325

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bruce Video.js HLS Player videojs-hls-player allows DOM-Based XSS.This issue affects Video.js HLS Player: from n/a through = 1.0.2...