55886 matches found
CVE-2022-36462
creationtimestamp| type| source ---|---|--- 2025-06-08 01:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr2ogveg2l2s...
CVE-2024-9993
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eaeleventdetailstext parameter of Event Calendar Widget in all versions up to, and including, 6.1.12 due to...
WordPress LTL Freight Quotes – Daylight Edition plugin <= 2.2.6 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter vulnerability
Unauthenticated Stored Cross-Site Scripting via expirydate Parameter vulnerability discovered by sterva in WordPress Plugin LTL Freight Quotes – Daylight Edition versions = 2.2.6...
CVE-2025-5765
creationtimestamp| type| source ---|---|--- 2025-06-06 15:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx5oyvnze2e...
WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Min Max Step Quantity Limits Manager for WooCommerce versions = 5.1.0...
CVE-2025-28984 WordPress Subscription Renewal Reminders for WooCommerce plugin <= 1.3.7 - Cross Site Request Forgery to Notice Dismissal vulnerability
Cross-Site Request Forgery CSRF vulnerability in storepro Subscription Renewal Reminders for WooCommerce allows Cross Site Request Forgery. This issue affects Subscription Renewal Reminders for WooCommerce: from n/a through 1.3.7...
CVE-2025-28981
CVE-2025-28981 is a vulnerability in the WordPress plugin WP Mail Options . The connected Red Hat entry confirms a Cross-Site Request Forgery (CSRF) condition that allows a Stored XSS via WP Mail Options, affecting versions listed as from n/a through 0.2.3. The CVE description in the initial docu...
CVE-2025-48784
creationtimestamp| type| source ---|---|--- 2025-06-06 10:51:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwo3olglc25 2025-06-06 11:02:40+00:00| seen| Telegram/IzUnLEyll0bCDFLZZ6Gvcvh0qc-X8AIjXpNZJHup4VBEb48...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service [CVE-2024-45338]
Summary IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability. CVE-2024-45338 Vulnerability Details CVEID:CVE-2024-45338 DESCRIPTION: An attacker can craft an...
CVE-2025-5738
creationtimestamp| type| source ---|---|--- 2025-06-06 09:31:41+00:00| published-proof-of-concept| Telegram/mYiFhS0KI41FnuJb80DPaIeUDJlgHATfKqT73V-Gr4Yn1fQ 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...
CVE-2025-5722
creationtimestamp| type| source ---|---|--- 2025-06-06 09:24:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwjantzgv2m...
CVE-2025-5713
creationtimestamp| type| source ---|---|--- 2025-06-06 05:11:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw33u2ptt2k...
PT-2025-24162 · Unknown · Nickduncan Contact Form
Name of the Vulnerable Software and Affected Versions: NickDuncan Contact Form versions n/a through 2.0.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...
WordPress Plugin Accessibility Suite has a security vulnerability
WordPress Accessibility Suite plugin is a plugin designed to enhance the accessibility of your website. WordPress Accessibility Suite plugin suffers from an authorization issue vulnerability that stems from a lack of authorization, no detailed vulnerability details are provided at this time...
WordPress plugin Activity Plus Reloaded for BuddyPress has a security vulnerability
WordPress Activity Plus Reloaded for BuddyPress plugin is an extension plugin that provides additional functionality to the BuddyPress community plugin. WordPress Activity Plus Reloaded for BuddyPress plugin suffers from an authorization issue vulnerability that stems from a lack of authorization...
Huawei HarmonyOS security vulnerabilities
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS version 5.0.0 suffers from a security vulnerability, no details of the vulnerability are provided at this time...
WordPress Plugin 6Storage Rentals has a security vulnerability
WordPress 6Storage Rentals plugin is an easy to use plugin that allows tenants to book the desired storage facility on your website. WordPress 6Storage Rentals plugin suffers from an authorization issue vulnerability that stems from a lack of authorization, no details of the vulnerability are...
QNAP File Station 5 Trust Management Vulnerability
QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. QNAP File Station 5 suffers from a trust management issue vulnerability that stems from improper certificate validation, no details of the vulnerability are...
QNAP QHora Authorization Issue Vulnerability
The QNAP QHora is a router from the Taiwan, China-based company Qualicom Technology QNAP. QNAP QHora has an authorization issue vulnerability that stems from improper authentication, and no detailed vulnerability details are available at this time...