CVE-2025-31446

CVE-2025-31446 : A reflected XSS in the WordPress plugin WP Cleaner (versions up to 1.1.5) arises from improper input neutralization during page generation. Public technical details are limited in the provided documents; no patch/mitigation details are available. Monitor for updates from the vend...

CVE-2025-31446 WordPress WP Cleaner plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jiangmiao WP Cleaner wpcleaner allows Reflected XSS.This issue affects WP Cleaner: from n/a through = 1.1.5...

CVE-2025-31446 WordPress WP Cleaner plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jiangmiao WP Cleaner allows Reflected XSS. This issue affects WP Cleaner: from n/a through 1.1.5...

WordPress plugin WP Cleaner has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

CVE-2025-31446: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jiangmiao WP Cleaner wpcleaner allows Reflected XSS.This issue affects WP Cleaner: from n/a through = 1.1.5...

Malicious code in file-auto-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e208249b8bca3dba900ffd090418895d9729e55b0fc1f6de2cab033bb4f669c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in file-auto-cleaner

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2761 Malicious code in file-auto-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e208249b8bca3dba900ffd090418895d9729e55b0fc1f6de2cab033bb4f669c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1481

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount

...

CVE-2025-1481

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-1481

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

WordPress Shortcode Cleaner Lite plugin <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Export vulnerability discovered by Krzysztof Zając in WordPress Plugin Shortcode Cleaner Lite versions = 1.0.9...

CVE-2025-1481 Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-1481 Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

WordPress Plugin Shortcode Cleaner Lite has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-10436

Name of the Vulnerable Software and Affected Versions Shortcode Cleaner Lite plugin for WordPress versions prior to 1.0.10 Description The issue allows unauthorized access to data due to a missing capability check on the download backup function. This makes it possible for authenticated attackers...

CVE-2025-1481: Missing Authorization

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

org.jenkins-ci.main:jenkins-test-harness (1.642), org.jenkins-ci.main:jenkins-war (1.642) +6 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.642)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.642 - org.jenkins-ci.main:jenkins-war 1.642 -...

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...