WordPress plugin MyDecor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

PT-2026-27913

Name of the Vulnerable Software and Affected Versions skygroup MyDecor versions prior to 1.5.9 Description A flaw exists in skygroup MyDecor that allows for Reflected Cross-site Scripting XSS. This issue is due to improper handling of user-supplied input when generating web pages. Successful...

CVE-2025-69322

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in fuelthemes PeakShops peakshops allows PHP Local File Inclusion.This issue affects PeakShops: from n/a through 1.5.9...

CVE-2010-3156

Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan horse executable file in the current working directory...

WordPress Product Labels For Woocommerce plugin < 1.5.9 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by tu3n4nh in WordPress Plugin Product Labels For Woocommerce versions 1.5.9...

CVE-2022-0753

Cross-site Scripting XSS - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.9...

Unshiftio Url-parse 访问控制错误漏洞

Url-Parse is a small Url parser that works seamlessly across Node.js and browser environments. An Access Control Error vulnerability exists in Unshiftio Url-parse that stems from the product's lack of an effective protection mechanism for user-controlled keys. The vulnerability can be exploited t...

WordPress WPForms Contact Form Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WPForms Contact Form is one of the contact form builder plugins. A cross-site scripting vulnerability exists in WordPres...