CVE-2025-50029

Missing Authorization vulnerability in Ashish AI Tools artificial-intelligence-auto-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Tools: from n/a through = 4.0.7...

PT-2025-33202 · Unknown · Ashish Ai Tools

Name of the Vulnerable Software and Affected Versions: Ashish AI Tools versions n/a through 4.0.7 Description: A missing authorization flaw exists in Ashish AI Tools, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Ashish AI Tools to a versi...

StackIdeas Komento component SQL注入漏洞

StackIdeas Komento component is a commenting plugin from StackIdeas Malaysia. A SQL injection vulnerability exists in StackIdeas Komento component versions 4.0.0-4.0.7, which stems from a SQL injection vulnerability that could lead to the execution of arbitrary SQL commands...

GHSA-36WV-V2QP-V4G4 Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged

Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attacker might be able to exploit this to cause a denial of service attack by causing an out of memory...

CVE-2024-56213

Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through = 4.0.7...

CVE-2023-22699

Missing Authorization vulnerability in MainWP MainWP Wordfence Extension.This issue affects MainWP Wordfence Extension: from n/a through 4.0.7...

CVE-2022-1672

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks...

CVE-2025-30984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dzynit SEO Tools seo-automatic-seo-tools allows Reflected XSS.This issue affects SEO Tools: from n/a through = 4.0.7...

CVE-2025-30984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dzynit SEO Tools seo-automatic-seo-tools allows Reflected XSS.This issue affects SEO Tools: from n/a through = 4.0.7...

CVE-2025-30984

CVE-2025-30984 describes a Reflected XSS in the WordPress SEO Tools (NotFound SEO Tools) plugin, with impact on SEO Tools versions up to 4.0.7. Public references (NVD/CVEs) show a CVSS v3.1 base score of 7.1 (HIGH), attack vector NETWORK, no privileges required, user interaction REQUIRED, and imp...

WordPress plugin SEO Tools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Linux Distros Unpatched Vulnerability : CVE-2017-7595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JPEGSetupEncode function in tiffjpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...

CVE-2024-38693

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs WP User Frontend allows SQL Injection.This issue affects WP User Frontend: from n/a through 4.0.7...

PT-2025-3928 · Unknown · Crafter Cms

Name of the Vulnerable Software and Affected Versions: CrafterCMS versions 4.0.0 through 4.0.7 CrafterCMS versions 4.1.0 through 4.1.5 Description: The issue affects CrafterCMS, allowing Directory Indexing and Resource Leak Exposure due to a 'Resource Leak' vulnerability. This vulnerability enabl...

CVE-2024-56294

CVE-2024-56294 applies to POSIMYTH Nexter Blocks up to version 4.0.7. Affected component: Nexter Blocks; Root cause: Missing Authorization due to incorrectly configured access control security levels. Impact, as per CVSS: network attack vector, low privileges required, no user interaction, with l...

PT-2025-3257 · Posimyth · Posimyth Nexter Blocks

Name of the Vulnerable Software and Affected Versions: POSIMYTH Nexter Blocks versions 4.0.7 and earlier Description: The issue is related to a Missing Authorization vulnerability in POSIMYTH Nexter Blocks, which allows exploiting incorrectly configured access control security levels...

WordPress plugin Nexter Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-56213

Path Traversal: '.../...//' vulnerability in Themewinter Eventin allows Path Traversal.This issue affects Eventin: from n/a through 4.0.7...

CVE-2024-56213

Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through = 4.0.7...

CVE-2024-56213

Path Traversal: '.../...//' vulnerability in Themewinter Eventin allows Path Traversal.This issue affects Eventin: from n/a through 4.0.7...