Lucene search
+L

10191 matches found

NVD
NVD
added 2025/12/31 2:15 p.m.14 views

CVE-2025-62138

Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through = 1.1.7...

5.3CVSS0.00183EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 1:51 p.m.34 views

CVE-2025-62138 WordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerability

Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through = 1.1.7...

5.3CVSS0.00183EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 1:51 p.m.4 views

CVE-2025-62138 WordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerability

Missing Authorization vulnerability in CedCommerce WP Advanced PDF allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through 1.1.7...

5.3CVSS6.6AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 1:51 p.m.15 views

CVE-2025-62138

CVE-2025-62138 refers to a Missing Authorization vulnerability in the WordPress plugin WP Advanced PDF (CedCommerce). Affected versions are listed as

5.3CVSS5.9AI score0.00183EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 1:49 p.m.12 views

WordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerability

Other vulnerability Type vulnerability discovered by NumeX in WordPress Plugin WP Advanced PDF versions = 1.1.7...

5.3CVSS6.8AI score0.00183EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2025/12/31 12:27 a.m.7 views

SUSE CVE-2023-54244

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was...

5.5CVSS6.5AI score0.00184EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.7 views

WordPress plugin WP Advanced PDF 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.14 views

PT-2025-54338

Name of the Vulnerable Software and Affected Versions CedCommerce WP Advanced PDF versions through 1.1.7 Description An authorization issue exists in CedCommerce WP Advanced PDF, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update CedCommerce...

5.3CVSS6.5AI score0.00183EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.9 views

WordPress Advanced iFrame plugin <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Host Header vulnerability discovered by omstaendlig in WordPress Plugin Advanced iFrame versions = 2024.5...

6.4CVSS5.9AI score0.00197EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.4 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993196 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'addwidgetnode' As 'kobjectadd' may allocated memory for...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/12/31 12:0 a.m.12 views

WordPress Advanced Ads Code Execution Vulnerability

WordPress Advanced Ads is an ad management plugin for WordPress designed to help website owners manage, optimize, and monetize their websites efficiently. WordPress Advanced Ads suffers from a code execution vulnerability that arises due to insufficient validation of user input by the...

7.2CVSS7.8AI score0.00794EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/31 12:0 a.m.11 views

SQL injection vulnerability in U8+ Channel Management (Advanced Edition) at UFIDA Network Technology Co. Ltd (CNVD-C-2025-1245200)

U8+ Channel Management Advanced Edition is a set of channel management software, together with U8+ supply chain system and financial system, extending the enterprise management radius from the internal enterprise to the distribution channels and sales terminals. A SQL injection vulnerability exis...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/30 7:7 p.m.9 views

CVE-2025-13592

The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-adcontent' shortcode parameter. This allows authenticated attackers with editor-level permissions or above, to execute code on the server...

7.2CVSS7.3AI score0.00794EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/30 5:9 p.m.7 views

CVE-2025-68878

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prasadkirpekar Advanced Custom CSS advanced-custom-css allows Reflected XSS.This issue affects Advanced Custom CSS: from n/a through = 1.1.0...

7.1CVSS5.9AI score0.00152EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/30 3:30 p.m.9 views

EUVD-2023-60484

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmc: Fix memory leak in amdpmcstbdebugfsopenv2 Function amdpmcstbdebugfsopenv2 may be called when the STB debug mechanism enabled. When amdpmcsendcmd fails, the 'buf' needs to be released...

5.9AI score0.00151EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/30 3:30 p.m.9 views

EUVD-2023-60397

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was...

5.9AI score0.00184EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/12/30 12:34 p.m.8 views

CVE-2023-54320

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmc: Fix memory leak in amdpmcstbdebugfsopenv2 Function amdpmcstbdebugfsopenv2 may be called when the STB debug mechanism enabled. When amdpmcsendcmd fails, the 'buf' needs to be released...

5.7AI score0.00151EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/12/30 12:15 p.m.10 views

CVE-2023-54244

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was...

5.5AI score0.00184EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/12/30 12:15 p.m.6 views

CVE-2022-50868

In the Linux kernel, the following vulnerability has been resolved: hwrng: amd - Fix PCI device refcount leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference count for...

5.3AI score0.00212EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/12/30 8:33 a.m.15 views

WordPress Advance WP Query Search Filter plugin <= 1.0.10 - Reflected XSS via taxo_ajax vulnerability

Reflected XSS via taxoajax vulnerability discovered by Yevgen Goncharuk in WordPress Plugin Advance WP Query Search Filter versions = 1.0.10...

6.1CVSS6AI score0.00155EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder