WordPress Goodlayers Core plugin < 2.1.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Bonds in WordPress Plugin Goodlayers Core versions 2.1.7...

WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin CM Map Locations versions = 2.1.6...

RSJoomla! RSMediaGallery! SQL注入漏洞

RSJoomla! RSMediaGallery! is an image management tool from RSJoomla! An SQL injection vulnerability exists in RSJoomla! RSMediaGallery! versions 1.7.4 through 2.1.7, which stems from improper cleanup of inputs in the dashboard component and could lead to an SQL injection attack...

CVE-2025-24015

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions 1.46.0 through 2.1.6 have an issue that affects AES-256-GCM and AES-128-GCM in Deno in which the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks the...

CVE-2025-24015 Deno's AES GCM authentication tags are not verified

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions 1.46.0 through 2.1.6 have an issue that affects AES-256-GCM and AES-128-GCM in Deno in which the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks the...

Improper Certificate Validation

Overview redshift-connector is a Redshift interface library Affected versions of this package are vulnerable to Improper Certificate Validation when using the BrowserAzureOAuth2CredentialsProvider plugin. An attacker can intercept token exchange communication and retrieve an access token by...

CVE-2025-5279 Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the Identity Provider. An insecure connection could allow an actor to intercept the token exchange process and retrieve an access...

CVE-2025-5279 Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the Identity Provider. An insecure connection could allow an actor to intercept the token exchange process and retrieve an access...

CVE-2024-47632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through = 2.1.7...

CVE-2023-46626

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FLOWFACT WP Connector plugin = 2.1.7 versions...

CVE-2018-11734

In e107 v2.1.7, output without filtering results in XSS...

CVE-2018-11127

e107 2.1.7 has CSRF resulting in arbitrary user deletion...

CVE-2009-4045

Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in 1 reporting/, 2 sales/, 3 sales/includes/, 4 sales/includes/db/, 5 sales/inquiry/, 6 sales/manage/, 7...

CVE-2025-39530

Cross-Site Request Forgery CSRF vulnerability in dsky Site Search 360 site-search-360 allows Stored XSS.This issue affects Site Search 360: from n/a through = 2.1.8...

WordPress plugin Deliver via Shipos for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2025-39530 WordPress Site Search 360 plugin <= 2.1.7 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dsky Site Search 360 allows Stored XSS. This issue affects Site Search 360: from n/a through 2.1.7...

CVE-2025-32278 WordPress Table Block by RioVizual plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wprio Table Block by RioVizual riovizual allows Cross Site Request Forgery.This issue affects Table Block by RioVizual: from n/a through = 2.3.1...

CVE-2025-31564

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Blind SQL Injection.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer,...

CVE-2025-31564

CVE-2025-31564 describes an authenticated SQL Injection vulnerability in the Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One plugin. Connected sources confirm the issue affects this WordPress plugin and indicate an SQL injection in the plugin’s handling of inputs. The W...

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Pop-Up Chop Chop versions = 2.1.7...