2796 matches found
CVE-2025-22576
CVE-2025-22576 is a Reflected XSS in the WordPress plugin/site "Site PIN" (by Marcus Downing), affecting version up to 1.3. The issue stems from improper input neutralization during web page generation. As per the provided sources, the CVE-ID and vulnerability type are confirmed, with a CVSSv3.1 ...
WordPress plugin Site PIN 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2025-4473 · Unknown · Opentracker Analytics
Name of the Vulnerable Software and Affected Versions: Opentracker Analytics versions n/a through 1.3 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS in Opentracker Analytics...
WordPress plugin Opentracker Analytics 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-22294 WordPress Custom Field For WP Job Manager plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Reflected XSS.This issue affects Custom Field For WP Job Manager: from n/a through = 1.3...
CVE-2025-22536 WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hiren.sabd WP Music Player wp-music-player allows SQL Injection.This issue affects WP Music Player: from n/a through = 1.3...
CVE-2025-22584
CVE-2025-22584 affects Timeline Pro (Timeline Pro plugin) up to version 1.3 and is tied to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in the Timeline Designer context. The issue arises from Improper Neutralization of Input During Web Page Generation, enabling an attacker wit...
CVE-2025-22584 WordPress Timeline Pro plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pluginspoint Timeline Pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through 1.3...
WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Music Player versions = 1.3...
WordPress Timeline Pro plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Timeline Pro versions = 1.3...
PT-2025-4527
Name of the Vulnerable Software and Affected Versions Hiren Patel WP Music Player versions 1.3 and earlier Description The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This means that an attacker could potentially inje...
WordPress plugin WP Music Player SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2025-4572 · Pluginspoint · Timeline Pro
Name of the Vulnerable Software and Affected Versions: pluginspoint Timeline Pro versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations: F...
Car Rental Management System 代码问题漏洞
Car Rental Management System is an open source car rental management system from CampCodes. A security vulnerability exists in Car Rental Management System versions v1.0 through v1.3, which stems from an authenticated arbitrary file upload vulnerability that allows an attacker to execute arbitrar...
WordPress plugin Timeline Pro 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
CLSA-2024-1735311149 openssl: Fix of CVE-2024-2511
CVE-2024-2511: Fix an issue where some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions...
PT-2024-35728 · Unknown · Car Rental Management System
Name of the Vulnerable Software and Affected Versions: Car Rental Management System versions 1.0 through 1.3 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file, exploiting an authenticated arbitrary file upload vulnerability. Recommendations: For versio...
QNAP Systems QuLog Center 跨站脚本漏洞
QNAP Systems QuLog Center is a report field for China Weilian Technology QNAP Systems that records events reported by the system. A cross-site scripting vulnerability exists in QNAP Systems QuLog Center versions 1.5, 1.4, and 1.3 that originates from a vulnerability that could allow a remote...
QNAP Systems QuLog Center 跨站脚本漏洞
QNAP Systems QuLog Center is a report field at China Weilian Technology QNAP Systems that logs events reported by the system. A cross-site scripting vulnerability exists in QNAP Systems QuLog Center versions 1.5, 1.4, and 1.3 that originates from a vulnerability that could allow a remote attacker...
