WordPress plugin WordPress Survey & Poll 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin WordPress...

ClipBucket 安全漏洞

ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A security vulnerability exists in ClipBucket V5 5.5.1 - 237 and prior versions that originated from a denial of service that allows an unauthenticated attacker to chan...

WordPress plugin TubePress.NET 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...

CVE-2024-12425

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...

WordPress plugin Marketplace Items 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-4497 · WordPress · Admin Debug Wordpress – Enable Debug

Name of the Vulnerable Software and Affected Versions: Digital Zoom Studio Admin debug wordpress – enable debug versions 1.0.13 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It affects the Admin debug wordpress – enable debug, allowing Cross Site Request...

WordPress plugin Instabot 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

WordPress plugin WP SecureSubmit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin DirectoryPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 安全漏洞

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer is a premium color caller screen and dialer from Wallfinity: Lovely Caller Theme. A security vulnerability exists in Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 1.1 and prior versions, which stems from a crafted inten...

IOBit Protected Folder 安全漏洞

IOBit Protected Folder is a file protection tool from IOBit Inc. It is used to secure important folders, data and privacy. A security vulnerability exists in IOBit Protected Folder version 13.6.0.5 and earlier versions, which stems from a null pointer dereference...

WordPress plugin WP Social AutoConnect 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress JobBoard Job listing plugin <= 1.2.6 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin JobBoard Job listing versions = 1.2.6...

WordPress plugin Services updates for customers 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

PT-2025-1519 · Codedrafty · Mediabay

Name of the Vulnerable Software and Affected Versions: codedrafty Mediabay versions 1.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For codedrafty...

WordPress plugin Mediabay 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Smartsupp 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-2497

Name of the Vulnerable Software and Affected Versions: Rara Theme Lawyer Landing Page versions 1.2.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Rara Theme Lawyer Landing Page, allowing unauthorized actions to be performed on behalf of a user without their...

WordPress plugin ProductX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Travel Monster 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...