CVE-2025-46229 WordPress Textmetrics plugin <= 3.6.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Israpil Textmetrics webtexttool allows Stored XSS.This issue affects Textmetrics: from n/a through = 3.6.2...

CVE-2025-46229

CVE-2025-46229 affects the WordPress Textmetrics plugin and is described as an Stored XSS due to improper input neutralization in web page generation. Affected versions are n/a through 3.6.2; remediation is to update to a version that contains the fix (Textmetrics 3.6.2 or later as available). Pu...

CVE-2025-32263

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

CVE-2025-32263 WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Sequential Order Numbers for WooCommerce versions = 3.6.2...

WordPress plugin Sequential Order Numbers for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2024-29770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pretty Links Shortlinks by Pretty Links allows Reflected XSS.This issue affects Shortlinks by Pretty Links: from n/a through 3.6.2...

PT-2025-3361 · Mashang Consumer Finance Co. · Anyihua

Name of the Vulnerable Software and Affected Versions: Mashang Consumer Finance Co., Ltd Anyihua iOS version 3.6.2 Description: The issue allows attackers to access sensitive user information by supplying a crafted link. Recommendations: For Mashang Consumer Finance Co., Ltd Anyihua iOS version...

WordPress Jet Engine plugin <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via listtag Parameter vulnerability discovered by stealthcopter in WordPress Plugin JetEngine versions = 3.6.2...

CVE-2007-1397 affecting package fish 3.6.2-1

CVE-2007-1397 affecting package fish 3.6.2-1. This CVE either no longer is or was never applicable...

CVE-2023-37967

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.2...

WordPress plugin DirectoryPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-12669 · Unknown · Directorypress

Name of the Vulnerable Software and Affected Versions: DirectoryPress versions 3.6.2 and earlier Description: The issue is related to a missing authorization vulnerability in Designinvento DirectoryPress, which allows exploiting incorrectly configured access control security levels. This problem...

SUSE CVE-2024-53862

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...

CVE-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...

PT-2024-33341

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.5.x through 3.6.x before 3.6.2 Description The issue is related to a buffer underrun in the pkwrite function when writing an opaque key pair. Recommendations For Mbed TLS versions 3.5.x through 3.6.x before 3.6.2, update to...

K000140954: libarchive vulnerability CVE-2022-36227

Security Advisory Description In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third...

PT-2024-38540 · Secom · Dr.Id Access Control System

Name of the Vulnerable Software and Affected Versions: Dr.ID Access Control System from SECOM versions up to 3.6.2 Description: The issue allows unauthenticated remote attackers to inject SQL commands, enabling them to read, modify, and delete database contents due to improper validation of a...

CVE-2024-5263

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and Table widgets in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress ElementsKit plugin <= 3.6.2 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin ElementsKit Pro versions = 3.6.2...