CVE-2025-26983

CVE-2025-26983 concerns WPZOOM’s Recipe Card Blocks for Gutenberg & Elementor (plugin: Recipe Card Blocks for Gutenberg & Elementor) version

CVE-2025-26983 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

CVE-2025-26983 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

CVE-2025-26952

CVE-2025-26952 is a Stored XSS in the WordPress plugin Business Card Block (versions

CVE-2025-26952 WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

CVE-2025-26952 WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

PT-2025-7879 · Wpzoom · Wpzoom Recipe Card Blocks

Name of the Vulnerable Software and Affected Versions: WPZOOM Recipe Card Blocks for Gutenberg & Elementor versions through 3.4.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels...

WordPress plugin Business Card Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Recipe Card Blocks for Gutenberg & Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2025-22495

An improper input validation vulnerability was discovered in the NTP server configuration field of the Network-M2 card. This could result in an authenticated high privileged user having the ability to execute arbitrary commands. The vulnerability has been resolved in the version 3.0.4. Note -...

Eaton Network-M2 安全漏洞

Eaton Network-M2 is a wireless network card from Eaton Corporation USA. A security vulnerability exists in the Eaton Network-M2 that stems from the inclusion of an improper input validation issue that could lead to command execution...

WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Prissy in WordPress Plugin Recipe Card Blocks for Gutenberg & Elementor versions = 3.4.3...

WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Logan Cote Patchstack Alliance in WordPress Plugin Business Card Block versions = 1.0.5...

CVE-2025-26756 WordPress Magic the Gathering Card Tooltips plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in grimdonkey Magic the Gathering Card Tooltips magic-the-gathering-card-tooltips allows Stored XSS.This issue affects Magic the Gathering Card Tooltips: from n/a through = 3.5.0...

WordPress plugin Magic the Gathering Card Tooltips 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPres...

PT-2025-7608 · Unknown · Grimdonkey Magic The Gathering Card Tooltips

Name of the Vulnerable Software and Affected Versions: grimdonkey Magic the Gathering Card Tooltips versions n/a through 3.5.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...

Macs targeted by infostealers in new era of cyberthreats

The latest, major threats to Mac computers can steal passwords and credit card details with delicate precision, targeting victims across the internet based on their device, location, and operating system. These are the dangers of “infostealers,” which have long plagued Windows devices but, in the...

Library Card System SQL Injection Vulnerability (CNVD-2025-03328)

Library Card System is a library management system. A SQL injection vulnerability exists in Library Card System version 1.0, which originates from a lack of validation of the id parameter of the card.php file against externally entered SQL statements. An attacker can use this vulnerability to...

The vulnerability of the mmc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mmc component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-1356

A vulnerability was found in needyamin Library Card System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file card.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...