CVE-2025-57944 WordPress Skimlinks Affiliate Marketing Tool Plugin <= 1.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Skimlinks Affiliate Marketing Tool: from n/a through 1.3...

CVE-2025-57944

CVE-2025-57944 is a Missing Authorization vulnerability in the Skimlinks Affiliate Marketing Tool (WordPress plugin Skimlinks) that allows access to functionality not properly constrained by ACLs. The vulnerability affects Skimlinks Affiliate Marketing Tool (from n/a through 1.3) and has a CVSS v...

CVE-2025-57943

CVE-2025-57943 describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Skimlinks Affiliate Marketing Tool (skimlinks). The issue affects the plugin as installed in versions from n/a through

CVE-2025-58670

CVE-2025-58670 describes a CSRF vulnerability in the WP Content Protection plugin (author: Shankaranand Maurya) that allows Stored XSS. Affected range is listed as n/a through 1.3. The included metrics show CVSS v3.1 base score 7.1 (HIGH) with attack vector Network, attack complexity Low, privile...

WordPress plugin Skimlinks Affiliate Marketing Tool 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

PT-2025-38959

Name of the Vulnerable Software and Affected Versions WP Content Protection versions through 1.3 Description A Cross-Site Request Forgery CSRF issue exists in Shankaranand Maurya WP Content Protection, which also allows Stored Cross-Site Scripting XSS. The issue allows for potential malicious...

PT-2025-38793

Name of the Vulnerable Software and Affected Versions Skimlinks Affiliate Marketing Tool versions through 1.3 Description The Skimlinks Affiliate Marketing Tool contains a Server-Side Request Forgery SSRF issue. This allows for Server Side Request Forgery. The affected product does not specify a...

Cacti 1.3.x-DEV Remote Code Execution

Cacti version 1.3.x-DEV suffer from an unauthenticated remote code execution vulnerability. An attacker can exploit this issue by sending a specially crafted HTTP request to the affected application. A successful exploit could allow the attacker to execute arbitrary code on the target system. No...

CVE-2025-58822

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mndpsingh287 WP Mail wp-mail allows DOM-Based XSS.This issue affects WP Mail: from n/a through = 1.3...

CVE-2025-58872 WordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through = 1.3...

CVE-2025-58872 WordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through = 1.3...

CVE-2025-58822 WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mndpsingh287 WP Mail wp-mail allows DOM-Based XSS.This issue affects WP Mail: from n/a through = 1.3...

CVE-2025-58822

CVE-2025-58822 is a DOM-based XSS vulnerability in the WordPress WP Mail plugin, affecting versions from n/a up to and including 1.3. The root cause is improper neutralization of input during web page generation. The CVE details come from multiple sources (NVD/CVE listings) and are reinforced by ...

WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin WP Mail versions = 1.3...

Security update for nginx

This update for nginx fixes the following issues: CVE-2025-53859: the server side may leak arbitrary bytes during the NGINX SMTP authentication process bsc1248070. CVE-2025-23419: session resumption can bypass client certificate authentication requirements using TLSv1.3 bsc1236851. Patch...

WordPress plugin Simple Price Calculator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-36211

Name of the Vulnerable Software and Affected Versions: premiumbizthemes Simple Price Calculator versions through 1.3 Description: A flaw exists in premiumbizthemes Simple Price Calculator that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data...

WordPress Document Engine Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin Document Engine versions = 1.2...

WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme 777 versions = 1.3...

Linux Distros Unpatched Vulnerability : CVE-2023-28144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and...