WordPress Rich Table of Contents plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin Rich Table of Contents versions = 1.4.0...

CVE-2025-32483 WordPress Request Call Back <= 1.4.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Salisbury Request Call Back allows Stored XSS. This issue affects Request Call Back: from n/a through 1.4.1...

CVE-2025-31902

CVE-2025-31902 affects the WordPress plugin Social Share And Social Locker (NotFound) and is classified as a Reflected XSS caused by improper neutralization of input during web page generation. The advisory lists the affected range as “from n/a through 1.4.1.” The connected documents do not provi...

WordPress plugin Social Share And Social Locker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress WP Link Preview plugin <= 1.4.1 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by theviper17 in WordPress Plugin WP Link Preview versions = 1.4.1...

CVE-2025-31527

CVE-2025-31527 is a Server-Side Request Forgery (SSRF) vulnerability affecting the WordPress plugin WP Link Preview . The provided documents indicate the flaw impacts versions from unspecified baseline up to and including 1.4.1. The vulnerability is cataloged with CVSS v3.1 metrics showing a base...

WordPress plugin WP Link Preview 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2024-10264 HTTP Request Smuggling in netease-youdao/qanything

HTTP Request Smuggling vulnerability in netease-youdao/qanything version 1.4.1 allows attackers to exploit inconsistencies in the interpretation of HTTP requests between a proxy and a server. This can lead to unauthorized access, bypassing security controls, session hijacking, data leakage, and...

NetEase QAnything 访问控制错误漏洞

NetEase QAnything is a local knowledge base question and answer system from China's NetEase NetEase dedicated to supporting arbitrary format files or databases, which can be installed and used offline. An access control error vulnerability exists in NetEase QAnything version 1.4.1, which stems fr...

Danswer 跨站请求伪造漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. A cross-site request forgery vulnerability exists in Danswer v1.4.1. An attacker exploiting this vulnerability could perform unauthorized actions in the victim's...

Danswer 访问控制错误漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. An Access Control Error vulnerability exists in Danswer v1.4.1, which stems from a misconfiguration of CORS and could lead to the disclosure of sensitive information...

NetEase QAnything 环境问题漏洞

NetEase QAnything is a local knowledge base question and answer system dedicated to supporting arbitrary format files or databases from China's NetEase NetEase, which can be installed and used offline. An environmental issue vulnerability exists in NetEase QAnything version 1.4.1 that originates...

CVE-2025-23744 WordPress Random Posts, Mp3 Player + ShareButton plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dvs11 Random Posts, Mp3 Player + ShareButton random-posts-mp3-player-sharebutton allows Reflected XSS.This issue affects Random Posts, Mp3 Player + ShareButton: from n/a through = 1.4.1...

GHSA-3PWP-2FQJ-6G2P Duplicate Advisory: Qiskit allows arbitrary code execution decoding QPY format versions < 13

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6m2c-76ff-6vrf. This link is maintained to preserve external references. Original Description A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege...

IBM Qiskit SDK 代码问题漏洞

The IBM Qiskit SDK is an open source SDK from International Business Machines IBM for using quantum computers at the extended quantum circuit, operator, and primitive levels. A code issue vulnerability exists in IBM Qiskit SDK versions 0.18.0 through 1.4.1 that stems from the possibility of...

WordPress Years Since – Timeless plugin <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Years Since versions = 1.4.1...

WordPress plugin Years Since – Timeless Texts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers. A cross-site scripting...

WordPress Social Share And Social Locker – ARSocial plugin <= 1.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Social Share And Social Locker versions = 1.4.1...

CVE-2025-23600

CVE-2025-23600 is a reflected XSS in the WordPress plugin “Send to a Friend Addon” (versions 1.4.1 and earlier). The root cause is improper neutralization of input during web page generation, allowing attacker-supplied input to be reflected in the page. Affected component: pinal.shah Send to a Fr...

CVE-2025-23600 WordPress Send to a Friend Addon plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pinal.shah Send to a Friend Addon send-booking-invites-to-friends allows Reflected XSS.This issue affects Send to a Friend Addon: from n/a through = 1.4.1...