PT-2025-5613 · Unknown · Activity Log Winterlock

Name of the Vulnerable Software and Affected Versions: Activity Log WinterLock versions prior to 1.2.5 Description: A cross-site request forgery issue exists. If a user views a malicious page while logged in, the log data may be deleted. Recommendations: For versions prior to 1.2.5, update to...

PT-2025-5559 · Unknown · Ezpz Saml Sp Single Sign On

Name of the Vulnerable Software and Affected Versions: EZPZ SAML SP Single Sign On SSO versions 1.2.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

CVE-2025-23706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in milordk Jet Skinner for BuddyPress jet-skinner-for-buddypress allows Reflected XSS.This issue affects Jet Skinner for BuddyPress: from n/a through = 1.2.5...

CVE-2025-23706

CVE-2025-23706: Jet Skinner for BuddyPress has a Reflected XSS vulnerability in input handling during Web Page Generation. Affected: BuddyPress plugin Jet Skinner up to version 1.2.5. Root cause/mitigation details are not provided in the supplied documents.

WordPress plugin Jet Skinner for BuddyPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin WP Wand 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress WP Wand plugin <= 1.2.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin WP Wand versions = 1.2.5...

CVE-2024-37937

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Rara Business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through 1.2.5...

CVE-2024-37937 WordPress Rara Business theme <= 1.2.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Rara Business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through 1.2.5...

CVE-2023-45045 WordPress WP Custom Widget area plugin <= 1.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in krozero WP Custom Widget area wp-custom-widget-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Widget area: from n/a through = 1.2.5...

WordPress plugin Rara Business 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin WP Custom Widget area 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-1483 · WordPress · Kishor Khambu Wp Custom Widget Area

Name of the Vulnerable Software and Affected Versions: Kishor Khambu WP Custom Widget area versions 1.2.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Kishor Khambu WP Custom Widget area, which allows exploiting incorrectly configured access contro...

CVE-2024-56011

CVE-2024-56011: Stored XSS in Responsive Google Maps (by imbaa) for WordPress. Root cause: Improper neutralization of input during web page generation. Affected: Responsive Google Maps plugin by IMBAA,

CVE-2024-56011 WordPress Responsive Google Maps | by imbaa plugin <= 1.2.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ilja Zaglov Responsive Google Maps | by imbaa responsive-google-maps allows Stored XSS.This issue affects Responsive Google Maps | by imbaa: from n/a through = 1.2.5...

PT-2024-36665 · Imbaa · Responsive Google Maps

Name of the Vulnerable Software and Affected Versions: Responsive Google Maps | by imbaa versions 1.2.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can inject...

WordPress plugin Responsive Google Maps | by imbaa 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Responsive Google Maps | b...

WordPress Responsive Google Maps | by imbaa plugin <= 1.2.5 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Responsive Google Maps | by imbaa versions = 1.2.5...

PT-2024-17315 · WordPress · Stripe Donation Plugin

Name of the Vulnerable Software and Affected Versions: Stripe Donation plugin for WordPress versions 1.2.5 and earlier Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'stripe donation' shortcode due to insufficient input sanitization and output escaping on...

CVE-2024-53790

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...