CVE-2024-13944 Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and...

CVE-2024-13944 Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and...

PT-2025-20563 · Avg · Avg Tuneup

Name of the Vulnerable Software and Affected Versions: AVG TuneUp version 23.4 build 15592 Description: The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use TOCTTOU...

CVE-2025-12363

creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/300 2025-10-27 19:39:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m476ccafyh2y 2025-10-28 06:01:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4ab23n4ww2m...

CVE-2025-12379

creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/300 2026-01-10 15:00:50+00:00| published-proof-of-concept| Telegram/51hy6eeB0OX5Oi4WYV6NJVEVeitRj2FXamGCe71U1ruORGw 2026-01-10 17:34:33+00:00| seen|...

WordPress Web Accessibility with Max Access plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Web Accessibility with Max Access versions = 2.0.9...

WordPress WP Pipes plugin <= 1.4.3 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by domiee13 in WordPress Plugin WP Pipes versions = 1.4.3...

CVE-2025-47509

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay Top 10 top-10 allows Stored XSS.This issue affects Top 10: from n/a through = 4.1.0...

WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin WPBakery Visual Composer WHMCS Elements versions = 1.0.4.3...

WordPress List category posts plugin <= 0.91.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin List category posts versions = 0.91.0...

WordPress Meks Flexible Shortcodes plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Meks Flexible Shortcodes versions = 1.3.6...

WordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy Patchstack Alliance in WordPress Plugin aBlocks versions = 1.9.2...

WordPress Show All Comments plugin <= 7.0.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Show All Comments versions = 7.0.1...

WordPress Beacon Lead Magnets and Lead Capture plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Beacon Lead Magnets and Lead Capture versions = 1.5.8...

CVE-2025-47509

CVE-2025-47509 is a stored XSS vulnerability in the WordPress plugin “Top 10” (WordPress Top 10) affecting versions up to 4.1.0 (n/a through 4.1.0). The issue arises from improper neutralization during web page generation, enabling cross-site scripting via input that is rendered on pages. The vul...

WordPress Time Clock plugin <= 1.2.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Time Clock versions = 1.2.3...

WordPress Top 10 plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Top 10 versions = 4.1.0...

WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Aiden Thái An in WordPress Plugin Ultimate WP Mail versions = 1.3.4...

WordPress Product Quantity Dropdown For Woocommerce plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Mika in WordPress Plugin Product Quantity Dropdown For Woocommerce versions = 1.2...

WordPress Listamester plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Listamester versions = 2.3.6...