CVE-2025-32492 WordPress Admin Menu Post List <= 2.0.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eliot Akira Admin Menu Post List allows Stored XSS. This issue affects Admin Menu Post List: from n/a through 2.0.7...

CVE-2025-32492

CVE-2025-32492 is an authenticated, stored XSS vulnerability in the WordPress plugin Admin Menu Post List (affected: Admin Menu Post List

PT-2025-16894 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the MIC Command Handler component, which can be exploited remotely. The manipulation of this component leads to a buffer overflow. The issue has been publicly...

PT-2025-16883 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects the MDTM Command Handler component of PCMan FTP Server, leading to a buffer overflow. The manipulation can be initiated remotely. The exploit has been disclosed to the publi...

PT-2025-16895 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects some unknown functionality of the CD Command Handler component, leading to buffer overflow. The attack can be launched remotely. Recommendations: For PCMan FTP Server versio...

PT-2025-16884 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the DIR Command Handler component, which can be exploited remotely. The manipulation leads to a buffer overflow. Recommendations: For PCMan FTP Server version 2.0....

PT-2025-15117 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the SYST Command Handler component, which can lead to buffer overflow when an unknown processing is manipulated. The attack can be initiated remotely...

CVE-2025-31805

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal Gutena Kit – Gutenberg Blocks and Templates gutena-kit allows Stored XSS.This issue affects Gutena Kit – Gutenberg Blocks and Templates: from n/a through = 2.0.7...

WordPress plugin Gutena Kit – Gutenberg Blocks and Templates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-26922

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techthemes AuraMart auramart allows Stored XSS.This issue affects AuraMart: from n/a through = 2.0.7...

WordPress AuraMart theme <= 2.0.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme AuraMart versions = 2.0.7...

CVE-2025-26534

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in helloprint Helloprint helloprint allows Path Traversal.This issue affects Helloprint: from n/a through = 2.0.7...

CVE-2025-26540

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in helloprint Helloprint helloprint allows Path Traversal.This issue affects Helloprint: from n/a through = 2.0.7...

CVE-2025-26540

CVE-2025-26540 corresponds to a path traversal vulnerability in the WordPress Helloprint plugin. The affected component is the Helloprint plugin for WordPress, with versions n/a through 2.0.7. Root cause: improper limitation of a pathname to a restricted directory, enabling traversal to access or...

CVE-2025-26534

CVE-2025-26534 is a WordPress issue in the Helloprint plugin (

PT-2025-9465

Name of the Vulnerable Software and Affected Versions Helloprint versions n/a through 2.0.7 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows unauthorized access to files and directories outside the...

CVE-2025-22345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tsinf TS Comfort DB ts-comfort-database allows Reflected XSS.This issue affects TS Comfort DB: from n/a through = 2.0.7...

PT-2025-5387 · Unknown · Thrivedesk

Name of the Vulnerable Software and Affected Versions: ThriveDesk versions prior to 2.0.7 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means an attacker can inject malicious scripts into the...

CVE-2024-13466

The Automatically Hierarchic Categories in Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autocategorymenu' shortcode in all versions up to, and including, 2.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This...

PT-2025-2184 · WordPress · Atakan Au Automatically Hierarchic Categories In Menu

Name of the Vulnerable Software and Affected Versions: Automatically Hierarchic Categories in Menu plugin for WordPress versions up to, and including, 2.0.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'autocategorymenu' shortcode due to insufficient input...