CVE-2025-64114

Summary: ClipBucket v5 (versions 5.5.2 and earlier) is vulnerable to an SQL injection through the ClipBucket Custom Fields plugin. The issue requires an authenticated administrator with plugin-management privileges and access to the Custom Fields plugin to execute arbitrary SQL against the databa...

EUVD-2025-37959

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

CVE-2025-64114 ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

CVE-2025-64114 ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

CVE-2025-11745 Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field through the plugin's 'adinserter' shortcode in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping on user supplied...

CVE-2025-11162

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2025-11162 Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2025-11162

CVE-2025-11162 affects Spectra Gutenberg Blocks – Website Builder for the Block Editor (WordPress plugin family). A stored cross-site scripting vulnerability exists via Custom CSS in all versions up to 2.19.14 (authenticated attacker with Contributor+ privileges can inject scripts executed on pag...

CVE-2025-11162 Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

PT-2025-45168

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 and below Description ClipBucket v5 is a video sharing platform. Versions 5.5.2 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database...

CVE-2025-11162: Improper Neutralization of Input During Web Page Generation

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

PT-2025-44917

Name of the Vulnerable Software and Affected Versions CE21 Suite plugin for WordPress versions prior to 2.3.2 Description The CE21 Suite plugin for WordPress is susceptible to sensitive information exposure through the log file. This allows unauthenticated attackers to extract sensitive data,...

CVE-2025-12045: Improper Neutralization of Input During Web Page Generation

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey, harbor-registry,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...