CVE-2025-31839

Cross-Site Request Forgery CSRF vulnerability in digireturn DN Footer Contacts dn-footer-contacts allows Cross Site Request Forgery.This issue affects DN Footer Contacts: from n/a through = 1.8.1...

CVE-2025-31839

CVE-2025-31839 describes a Cross-Site Request Forgery in the DN Footer Contacts WordPress plugin. Affected: DN Footer Contacts up to version 1.8. CVSS 3.1: Network attack, Low integrity impact, requires user interaction; no remediation or fixes are specified in the provided documents. Root cause/...

WordPress plugin DN Footer Contacts 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability

WordPress Alloggio - Hotel Booking Theme theme = 1.8 - Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Alloggio - Hotel Booking versions = 1.8...

CVE-2025-30776

CVE-2025-30776: Stored XSS in Sitekit (WordPress plugin by webvitaly) due to improper input neutralization during web page generation. Affected versions are Sitekit from an unspecified earliest version up to 1.8.0. CVSS 3.1 base score 6.5 (Medium) with NETWORK attack vector, low privileges, user ...

WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Sitekit versions = 1.8...

WordPress plugin Sitekit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-28924

CVE-2025-28924 is a Reflected XSS affecting ZenphotoPress (NotFound ZenphotoPress entry) with versions up to 1.8. The issue arises from improper input neutralization during web page generation. The CVSSv3.1 base score is 7.1 (HIGH): network attack vector, low confidentiality/integrity/availabilit...

CVE-2025-28924 WordPress ZenphotoPress plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simbul ZenphotoPress zenphotopress allows Reflected XSS.This issue affects ZenphotoPress: from n/a through = 1.8...

WordPress plugin ZenphotoPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2025-25988

Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter...

Hoosk 安全漏洞

Hoosk is a lightweight content management system from the individual developers at Havok. A security vulnerability exists in Hoosk version 1.8, which stems from the Link title and Title parameters causing a denial of service by a remote attacker...

PT-2025-7117 · Hooskcms · Hooskcms

Name of the Vulnerable Software and Affected Versions: hooskcms version 1.8 Description: The issue allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter. This is related to a Cross Site Scripting vulnerability. Recommendations: For...

CVE-2025-25166

Cross-Site Request Forgery CSRF vulnerability in gabrieldarezzo InLocation allows Stored XSS. This issue affects InLocation: from n/a through 1.8...

CVE-2025-25166

Cross-Site Request Forgery CSRF vulnerability in gabrieldarezzo InLocation inlocation allows Stored XSS.This issue affects InLocation: from n/a through = 1.8...

CVE-2025-25166

CVE-2025-25166 relates to the WordPress InLocation plugin (gabrieldarezzo) with a CSRF flaw that enables stored XSS. Affected: InLocation versions n/a through 1.8. Notably, multiple sources (NVD/Red Hat/NVD mirrors, CIRCL, Vuln enrichment) confirm the CSRF-triggered stored XSS vector. The public ...

WordPress plugin InLocation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2024-31356

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8...

CVE-2025-21520

A flaw was found in MySQL Server component: Options. This issue may allow unauthorized read access to a subset of MySQL Server data via a high-privileged attacker with logon to the infrastructure and requires human interaction from another user...

CVE-2025-23489

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brian Messenlehner WP-Announcements wp-announcements allows Reflected XSS.This issue affects WP-Announcements: from n/a through = 1.8...