CVE-2025-64220 WordPress Rey Core plugin <= 3.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReyCommerce Rey Core rey-core allows Stored XSS.This issue affects Rey Core: from n/a through = 3.1.8...

CVE-2025-64220

CVE-2025-64220 is a stored XSS in Rey Commerce Rey Core (rey-core) for WordPress, affecting Rey Core versions up to and including 3.1.8. The issue arises from improper input neutralization during web page generation, enabling an attacker to inject script that executes in other users’ browsers. Th...

PT-2025-44255

Name of the Vulnerable Software and Affected Versions ReyCommerce Rey Core versions through 3.1.8 Description ReyCommerce Rey Core contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition. This allows for the...

EUVD-2020-5514

Malware in sbrugna...

EUVD-2025-8524

Malicious code in bioql PyPI...

EUVD-2025-8523

Malicious code in bioql PyPI...

EUVD-2023-30822

Malicious code in bioql PyPI...

EUVD-2022-7176

Malicious code in bioql PyPI...

EUVD-2025-30638

Malicious code in bioql PyPI...

EUVD-2022-6994

Malicious code in bioql PyPI...

CVE-2025-59537

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate client...

CVE-2025-57990

Missing Authorization vulnerability in solwininfotech Blog Designer blog-designer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blog Designer: from n/a through = 3.1.8...

CVE-2025-57990

Missing Authorization vulnerability in solwininfotech Blog Designer blog-designer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blog Designer: from n/a through = 3.1.8...

CVE-2025-57990

CVE-2025-57990 (Blog Designer) is a Missing Authorization vulnerability in the WordPress Blog Designer plugin. Affected versions are

PT-2025-38840

Name of the Vulnerable Software and Affected Versions solwininfotech Blog Designer versions through 3.1.8 Description An authorization issue exists in solwininfotech Blog Designer due to incorrectly configured access control security levels. This allows for exploitation of the system...

Linux Distros Unpatched Vulnerability : CVE-2023-28096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS, a Session Initiation Protocol SIP server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memor...

CVE-2023-28096

OpenSIPS, a Session Initiation Protocol SIP server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memory leak was detected in the function parsemirequest while performing coverage-guided fuzzing. This issue can be reproduced by sending...

CVE-2023-27596

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.8 and 3.2.5, OpenSIPS crashes when a malformed SDP body is sent multiple times to an OpenSIPS configuration that makes use of the streamprocess function. This issue was discovered during coverage guided...

CVE-2021-24169

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS...

CVE-2012-4277

Cross-site scripting XSS vulnerability in the smartyfunctionhtmloptionsoptoutput function in distribution/libs/plugins/function.htmloptions.php in Smarty before 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...