1428 matches found
PT-2025-36168
Name of the Vulnerable Software and Affected Versions: aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One versions n/a through 2.2.6 Description: A Server-Side Request Forgery SSRF vulnerability exists in aitool Ai Auto Tool Content Writing Assistant Gemini Writer,...
CVE-2025-58829: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...
WordPress plugin All-in-One WP Migration and Backup has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-8490: Improper Neutralization of Input During Web Page Generation
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Import in all versions up to, and including, 7.97 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...
PT-2025-34708 · WordPress · All-In-One Wp Migration
Name of the Vulnerable Software and Affected Versions: All-in-One WP Migration and Backup versions through 7.97 Description: The All-in-One WP Migration and Backup plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Import function. Insufficient input sanitization and...
it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.1) potentially affected by CVE-2025-43768 via com.liferay.portal:com.liferay.portal.impl (3.22.20)
com.liferay.portal:com.liferay.portal.impl MAVEN version 3.22.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...
it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.1) potentially affected by CVE-2025-43770 via com.liferay.portal:com.liferay.portal.kernel (3.39.2)
com.liferay.portal:com.liferay.portal.kernel MAVEN version 3.39.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...
it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.0) potentially affected by CVE-2025-43768 via com.liferay.portal:com.liferay.portal.impl (3.0.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...
it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.3) potentially affected by CVE-2025-43768 via com.liferay.portal:com.liferay.portal.impl (4.3.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...
it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.4) potentially affected by CVE-2025-43768 via com.liferay.portal:com.liferay.portal.impl (4.12.11)
com.liferay.portal:com.liferay.portal.impl MAVEN version 4.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...
it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.2.0) potentially affected by CVE-2025-43768 via com.liferay.portal:com.liferay.portal.impl (5.1.6)
com.liferay.portal:com.liferay.portal.impl MAVEN version 5.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...
it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.2.1) potentially affected by CVE-2025-43768 via com.liferay.portal:com.liferay.portal.impl (5.9.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...
com.liferay.portal:com.liferay.portal.impl (4.35.3), it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.4) potentially affected by CVE-2025-43770 via com.liferay.portal:com.liferay.portal.kernel (4.35.3)
com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.35.3 -...
CVE-2025-6832
CVE-2025-6832 describes a reflected cross-site scripting vulnerability in the WordPress plugin "All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier" (versions up to 2.0). According to Wordfence and CVE sources, the issue stems from insufficient input sanitization and output ...
CVE-2025-6832 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting
The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible...
CVE-2025-6832 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting
The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible...
CVE-2025-6832: Improper Neutralization of Input During Web Page Generation
The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible...
CVE-2025-7443: Unrestricted Upload of File with Dangerous Type
The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the storejavascriptcache.php file in all versions up to, and including, 2.2.4...
