PT-2025-24263 · WordPress · Vuong Nguyen Wp Security Master

Name of the Vulnerable Software and Affected Versions: Vuong Nguyen WP Security Master versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Vuong...

PT-2025-24118 · Faster Themes · Fasterthemes Fastbook

Name of the Vulnerable Software and Affected Versions: FasterThemes FastBook versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker...

i-PRO surveillance cameras 跨站请求伪造漏洞

i-PRO surveillance cameras are a series of cameras from the Japanese company i-PRO. A cross-site request forgery vulnerability exists in i-PRO surveillance cameras, which stems from vulnerability to cross-site request forgery attacks that could lead to the execution of unexpected actions...

PT-2025-24221 · WordPress · Wp Table Builder

Name of the Vulnerable Software and Affected Versions: WP Table Builder versions n/a through 2.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where a malicious...

PT-2025-24087 · Gravity Forms · Real Time Validation For Gravity Forms

Name of the Vulnerable Software and Affected Versions: Real Time Validation for Gravity Forms versions 1.7.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This issue can be exploited to perform actions on beha...

PT-2025-24254 · WordPress · Codepeople Wp Time Slots Booking Form

Name of the Vulnerable Software and Affected Versions: codepeople WP Time Slots Booking Form versions 1.2.30 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the codepeople WP Time Slots Booking Form, allowing unauthorized actions to be performed on behalf of a user withou...

PT-2025-24121 · WordPress · Wp Corner Quick Event Calendar

Name of the Vulnerable Software and Affected Versions: WP Corner Quick Event Calendar versions 1.4.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For WP Corner...

PT-2025-24185 · Unknown · Alessandro Piconi Simple Keyword To Link

Name of the Vulnerable Software and Affected Versions: Alessandro Piconi Simple Keyword to Link versions 1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attac...

PT-2025-24171 · Unknown · Giraphix Creative Layouts For Elementor

Name of the Vulnerable Software and Affected Versions: Giraphix Creative Layouts for Elementor versions 1.11 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including data...

CVE-2024-45655

IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment...

PT-2025-24051 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability has been found in the HTTP POST Request Handler component of TOTOLINK X15, affecting the file /boafrm/formWlanRedirect. The manipulation of the redirect-url...

PT-2025-23845 · Vmware · Vmware Nsx

Name of the Vulnerable Software and Affected Versions: VMware NSX affected versions not specified Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation. This allows for malicious scripts to be stored and executed,...

CVE-2024-45655

IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment...

CVE-2024-45655 IBM Application Gateway incorrect permission assignment

IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment...

CVE-2024-45655

CVE-2024-45655 affects IBM Application Gateway versions 19.12–24.09. The root cause is incorrect permissions assignment enabling a local privileged user to perform unauthorized actions. Documented impacts confirm local privilege escalation with the vulnerability. Remediation: IBM indicates upgrad...

MAL-2025-4728 Malicious code in actions-languageservice (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb74af5f6a7d398be58bda53f50ba2f8e6487b53678077cffda3a4531ecef4 Any computer that has this package installed or running should be considered...

Malicious code in actions-languageservice (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb74af5f6a7d398be58bda53f50ba2f8e6487b53678077cffda3a4531ecef4 Any computer that has this package installed or running should be considered...

MAL-2025-4656 Malicious code in remote-actions (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 602ccb0c9280efaed9bc494cf89db45c8fd4d77619a8b621c339d44dc6479bf5 Any computer that has this package installed or running should be considered...

PT-2025-23619 · Ibm · Ibm Application Gateway

Name of the Vulnerable Software and Affected Versions: IBM Application Gateway versions 19.12 through 24.09 Description: The issue allows a local privileged user to perform unauthorized actions due to incorrect permissions assignment. Recommendations: For IBM Application Gateway versions 19.12...

CVE-2024-3509 Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor

A stored cross-site scripting XSS vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within the registry section. To exploit this vulnerability, a malicious actor must have a valid user account with administrative...