46 matches found
MINI-VCX4-8QJJ-6692
Bulletin has no description...
CVE-2026-6692
creationtimestamp| type| source ---|---|--- 2026-05-07 06:54:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlan2p5q2s2e 2026-05-07 10:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlayyrc6ro2r 2026-05-07 11:11:07+00:00| seen|...
PT-2026-38255
Name of the Vulnerable Software and Affected Versions Slider Revolution versions 7.0.0 through 7.0.10 Description Insufficient file type validation in the get media url and check file path functions allows authenticated attackers with subscriber-level access or higher to perform an Arbitrary File...
RHSA-2026:6692 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHEL 10 : kernel (RHSA-2026:6692)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6692 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: svcrdma: use rcpageoff for...
MINI-6692-2WC9-27H2
Bulletin has no description...
CVE-2025-6692
creationtimestamp| type| source ---|---|--- 2025-07-29 09:43:05+00:00| seen| Telegram/XxfO8RfGMD03IH9stBzW6ai39F1aNFksdktk8nFmDh26RkE...
CVE-2025-6692 YouTube Embed <= 10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via instance Parameter
The YouTube Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘instance’ parameter in all versions up to, and including, 10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
WordPress YouTube Embed plugin <= 10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via instance Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via instance Parameter vulnerability discovered by Gilang in WordPress Plugin YouTube Embed - YouTube Gallery, Vimeo Gallery - Wordpress Plugin versions = 10.3...
CVE-2023-6692
The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
WordPress Yoast SEO Plugin < 2.2 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:yoast:yoastseo"; if description...
Adobe Reader < 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30094 or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and...
WordPress Easy Digital Downloads Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)
Software Easy Digital Downloads Type Plugin Vulnerable versions = 3.3.2 Fixed in 3.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6692 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 17d4fab0ea28 Credits Jonas Benjamin...
CVE-2023-6692 Ultimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox
The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2023-6692 Ultimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox
The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2023-6692
CVE-2023-6692 affects the Ultimate Blocks – WordPress Blocks Plugin. The vulnerability is Stored Cross-Site Scripting in the plugin’s tab anchor metabox, exploited by authenticated users with contributor-level permissions and above. Impact is that injected scripts could execute when other users l...
WordPress Ultimate Blocks – Gutenberg Blocks Plugin Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Ultimate Blocks – Gutenberg Blocks Plugin Type Plugin Vulnerable versions = 3.1.0 Fixed in 3.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6692 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0c6c4059359d Credit...
CVE-2019-6692
creationtimestamp| type| source ---|---|--- 2024-01-27 12:16:33+00:00| seen| https://t.me/ctinow/174743...