Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution

Jenkins Templating Engine Plugin allows defining libraries both in the global configuration, as well as scoped to folders containing the pipelines using them. While libraries in the global configuration can only be set up by administrators and can therefore be trusted, libraries defined in folder...

CVE-2025-31731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Philip John Author Bio Shortcode author-bio-shortcode allows Stored XSS.This issue affects Author Bio Shortcode: from n/a through = 2.5.3...

CVE-2025-31731

CVE-2025-31731 is a Stored XSS vulnerability in the WordPress plugin Author Bio Shortcode (vulnerable up to 2.5.3). The issue stems from improper neutralization of input during web page generation, enabling stored cross-site scripting. Exploitation would require authentication (Contributor+ level...

WordPress plugin Author Bio Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

Oiwtech OIW-2431APGN-HP 命令注入漏洞

The Oiwtech OIW-2431APGN-HP is a wireless router from Oiwtech. The Oiwtech OIW-2431APGN-HP version 2.5.3-B20131128 suffers from a command injection vulnerability that stems from os command injection, which could lead to a remote attacker executing arbitrary commands...

WordPress plugin WC Affiliate – A Complete WooCommerce Affiliate Plugin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WC Affilia...

WordPress WC Affiliate plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Exposure via wf-export-all vulnerability discovered by Thanh Nam Tran in WordPress Plugin WC Affiliate versions = 2.5.3...

WordPress WP Performance Pack plugin <= 2.5.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Performance Pack versions = 2.5.3...

PT-2025-8708

Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.3 Description The issue is related to an arbitrary file upload vulnerability in the admin/plugin.php component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted Zip file. Recommendation...

CVE-2025-25783

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...

WordPress WP Triggers Lite plugin <= 2.5.3 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin WP Triggers Lite versions = 2.5.3...

CVE-2024-13095

The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-13095

CVE-2024-13095 describes an SQL injection in the WordPress plugin WP Triggers Lite up to version 2.5.3, caused by unsanitized/unescaped input used in a SQL statement. The vulnerability affects admins who can exploit the parameter handling to perform SQL injection attacks. The provided connected d...

PT-2025-1993

Name of the Vulnerable Software and Affected Versions WP Triggers Lite WordPress plugin versions 2.5.3 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...

PT-2025-1994 · WordPress · Wp Triggers Lite

Name of the Vulnerable Software and Affected Versions: WP Triggers Lite versions 2.5.3 and earlier Description: The issue concerns a failure to sanitize and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL injection attacks. Recommendations: For WP...

PT-2025-1501 · Unknown · Applyonline

Name of the Vulnerable Software and Affected Versions: ApplyOnline – Application Form Builder and Manager versions 2.5.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can...

CVE-2024-54270

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Axeptio Axeptio axeptio-sdk-integration allows PHP Local File Inclusion.This issue affects Axeptio: from n/a through = 2.5.4...

CVE-2024-54270 WordPress Axeptio plugin <= 2.5.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Axeptio Axeptio axeptio-sdk-integration allows PHP Local File Inclusion.This issue affects Axeptio: from n/a through = 2.5.4...

WordPress plugin Axeptio 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-35228 · Unknown · Cyan Backup

Name of the Vulnerable Software and Affected Versions: CYAN Backup versions n/a through 2.5.3 Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which affects CYAN Backup. This allows for Path Traversal. Recommendations: For CYAN Backup...