23603 matches found
CVE-2025-32559 WordPress REVE Chat plugin <= 6.2.2 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in REVE Chat REVE Chat allows Stored XSS. This issue affects REVE Chat: from n/a through 6.2.2...
CVE-2025-32563 WordPress WP Calais Auto Tagger plugin <= 2.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in dangrossman WP Calais Auto Tagger calais-auto-tagger allows Cross Site Request Forgery.This issue affects WP Calais Auto Tagger: from n/a through = 2.0...
CVE-2025-32621
CVE-2025-32621 (WP Map Route Planner) describes a Cross-Site Request Forgery leading to Stored Cross-Site Scripting in WP Map Route Planner versions
CVE-2025-32641 WordPress Anant Addons for Elementor plugin <= 1.1.5 - CSRF to Arbitrary Plugin Installation vulnerability
Cross-Site Request Forgery CSRF vulnerability in anantaddons Anant Addons for Elementor allows Cross Site Request Forgery. This issue affects Anant Addons for Elementor: from n/a through 1.1.5...
CVE-2025-32667 WordPress Doppler Forms plugin <= 2.5.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in fromdoppler Doppler Forms doppler-form allows Stored XSS.This issue affects Doppler Forms: from n/a through = 2.5.1...
CVE-2025-32673
CVE-2025-32673 : CSRF to Stored XSS in the WordPress plugin “Epeken All Kurir” for WooCommerce, affected versions up to 1.4.6.2. Connected document evidence confirms the issue as Cross-Site Request Forgery leading to Stored XSS; patch status is listed as Unpatched. No exploitation details are pro...
WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Logo Showcase Ultimate versions = 1.4.4...
CVE-2025-32680 WordPress Review Stream plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Grade Us, Inc. Review Stream review-stream allows Stored XSS.This issue affects Review Stream: from n/a through = 1.6.7...
CVE-2025-32684
CVE-2025-32684: MapSVG Lite (WordPress) contains a Missing Authorization vulnerability up to version 8.5.32 due to misconfigured access control; the connected docs do not provide a confirmed fix version or remediation steps. The CVSS v3.1 metrics indicate a Low confidentiality impact and no integ...
CVE-2025-32693 WordPress WebinarPress <= 1.33.27 - Open Redirection Vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WPWebinarSystem WebinarPress allows Phishing. This issue affects WebinarPress: from n/a through 1.33.27...
CVE-2025-32381 Denial of Service by abusing xgrammar unbounded cache in memory
XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to 0.1.18, Xgrammar includes a cache for compiled grammars to increase performance with repeated use of the same grammar. This cache is held in memory. Since the cache is unbounded, a system maki...
CVE-2025-29189
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-31672
Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...
CVE-2024-49848
Memory corruption while processing multiple IOCTL calls from HLOS to DSP...
CVE-2024-45543
Memory corruption while accessing MSM channel map and mixer functions...
CVE-2024-45540
Memory corruption while invoking IOCTL map buffer request from userspace...
CVE-2025-21434
Transient DOS may occur while parsing EHT operation IE or EHT capability IE...
CVE-2025-21429
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...