CVE-2025-15525

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, mongodb-kubernetes-operator, cert-manager-fips, sonobuoy, crossplane-provider-family-aws, amazon-ssm-agent-fips, vault, kubo, hydra, gcp-compute-persistent-disk-csi-driver-fips, minio, listmonk, kubernetes-replicator-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, mongodb-kubernetes-operator, cert-manager-fips, sonobuoy, crossplane-provider-family-aws, amazon-ssm-agent-fips, vault, kubo, hydra, gcp-compute-persistent-disk-csi-driver-fips, minio, listmonk, kubernetes-replicator-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: kubernetes-release, mongodb-kubernetes-operator, cert-manager-fips, nfs-subdir-external-provisioner, sonobuoy, kratos, crossplane-provider-family-aws, amazon-ssm-agent-fips, vault, kubo, hydra, gcp-compute-persistent-disk-csi-driver-fips, azure-ipam, minio,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: kubernetes-release, mongodb-kubernetes-operator, cert-manager-fips, nfs-subdir-external-provisioner, sonobuoy, kratos, crossplane-provider-family-aws, amazon-ssm-agent-fips, vault, kubo, hydra, gcp-compute-persistent-disk-csi-driver-fips, azure-ipam, minio,...

EUVD-2025-206596

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

CVE-2025-15525 Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

CVE-2025-15525

CVE-2025-15525 affects the WordPress plugin “Ajax Load More – Infinite Scroll, Load More, & Lazy Load.” The vulnerability arises from incorrect authorization in the parse_custom_args() function, allowing unauthenticated users to view titles and excerpts of private, draft, pending, scheduled, and ...

CVE-2026-0683: Improper Neutralization of Special Elements used in an SQL Command

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the Number-type custom field filter in all versions up to, and including, 3.4.4. This is due to insufficient escaping on the user-supplied operand value when using the equals...

PT-2026-5501

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parse custom args function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expo...

CVE-2025-13176

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL...

CVE-2025-13176 Local privilege escalation in ESET Inspect Connector for Windows

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL...

EUVD-2025-206582

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL...

CVE-2025-13176

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL...

CVE-2025-14975

The Custom Login Page Customizer WordPress plugin before 2.5.4 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account...

PT-2026-5395

Name of the Vulnerable Software and Affected Versions ESET Inspect Connector versions prior to 3.0.5765 Description The ESET Inspect Connector is susceptible to a local privilege escalation. Planting a custom configuration file allows the loading of a malicious DLL. The ElConnector.exe process,...

CVE-2025-13176: Improper Privilege Management

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL...

CVE-2025-14975

The Custom Login Page Customizer WordPress plugin before 2.5.4 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account...

CVE-2025-14975 Custom Login Page Customizer < 2.5.4 - Unauthenticated Arbitrary Password Reset

The Custom Login Page Customizer WordPress plugin before 2.5.4 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account...

CVE-2025-14975

The Custom Login Page Customizer WordPress plugin (versions before 2.5.4 ) contains an unauthenticated account takeover vulnerability due to Reset-Key Poisoning . When the "custom registration password" feature is enabled, the plugin adds a global random_password filter that incorrectly returns a...