WordPress Plugins Last Updated Column plugin <= 0.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Plugins Last Updated Column versions = 0.1.3...

CVE-2025-28887 WordPress Plugins Last Updated Column plugin <= 0.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column allows Cross Site Request Forgery.This issue affects Plugins Last Updated Column: from n/a through = 0.1.3...

CVE-2025-28887

CVE-2025-28887 describes a Cross-Site Request Forgery (CSRF) vulnerability in WordPress plugin Plugins Last Updated Column (Last Updated Column) affecting versions up to and including 0.1.3 . The issue is reported by multiple sources (NVD, CVE list, Patchstack) with a CVSS v3.1 base score of 4.3 ...

PT-2025-10931

Name of the Vulnerable Software and Affected Versions: Fastmover Plugins Last Updated Column versions 0.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows unauthorized actions to be performed on behalf of a user. This is due to inadequate...

MENNEKES Charging Column Smart security vulnerabilities

MENNEKES Charging column Smart is a smart charging column from MENNEKES. A security vulnerability exists in MENNEKES Charging column Smart versions prior to 2.15, which originates from the ability to read arbitrary files...

CVE-2025-28887: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column allows Cross Site Request Forgery.This issue affects Plugins Last Updated Column: from n/a through = 0.1.3...

org.jenkins-ci.main:jenkins-test-harness (1.465), org.jenkins-ci.main:jenkins-war (1.465) +5 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.465)

org.jenkins-ci.main:jenkins-core MAVEN version 1.465 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.465 - org.jenkins-ci.main:jenkins-war 1.465 -...

CVE-2024-51962

A SQL injection vulnerability in ArcGIS Server allows an EDIT operation to modify Column properties allowing for the execution of a SQL Injection by a remote authenticated user with elevated non admin privileges. There is a high impact to integrity and confidentiality and no impact to availabilit...

CVE-2024-51962

A SQL injection vulnerability in ArcGIS Server allows an EDIT operation to modify column properties in a manner that could lead to SQL injection when performed by a remote authenticated user requiring elevated, non‑administrative privileges. Exploitation is restricted to users with advanced...

CVE-2024-51962

A SQL injection vulnerability in ArcGIS Server allows an EDIT operation to modify column properties in a manner that could lead to SQL injection when performed by a remote authenticated user requiring elevated, non‑administrative privileges. Exploitation is restricted to users with advanced...

CVE-2024-57430: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation...

Exploit for SQL Injection in Phpjabbers Cinema_Booking_System

CVE-2024-57430 An SQL injection vulnerability in the pjActionG...

CVE-2024-57632

An issue in the iscolumnunique component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

PT-2025-3500 · Monetdb · Monetdb Server

Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the exps bind column component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider restricting...

PT-2025-3499 · Monetdb · Monetdb Server

Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the is column unique component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider disabling the ...

MonetDB SQL injection vulnerability

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A SQL injection vulnerability exists in MonetDB version v11.49.1, which stems from an issue contained in the iscolumnunique component. An attacker exploiting this vulnerability could cause a...

MonetDB SQL injection vulnerability

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A SQL injection vulnerability exists in MonetDB version v11.49.1, which stems from an issue contained in the expsbindcolumn component. An attacker exploiting this vulnerability could cause a...

MonetDB security vulnerabilities

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A security vulnerability exists in MonetDB version v11.47.11 that stems from an issue contained in the bindcolexp component. An attacker exploiting this vulnerability could cause a denial of...

PT-2025-1868

Name of the Vulnerable Software and Affected Versions Bootstrap Blocks for WP Editor v2 plugin for WordPress versions up to, and including, 2.5.0 Description The issue is related to stored cross-site scripting due to insufficient input sanitization and output escaping in the 'gtb-bootstrap/column...

WordPress plugin Bootstrap Blocks for WP Editor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...