CVE-2025-52287

OperaMasks SDK ELite Script Engine v0.5.0 contains a deserialization vulnerability. CVE-2025-52287 shows a NETWORK-exploitable flaw with HIGH impact to confidentiality, integrity, and availability (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected component: OperaMasks SDK ELite Script Engine; root ...

WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Le Ngoc Anh in WordPress Theme Magazine Elite versions = 1.2.4...

WordPress Magazine Elite Theme <= 1.2.4 is vulnerable to Local File Inclusion

Software Magazine Elite Type Theme Vulnerable versions = 1.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-53244 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID da2ed7dcedc4 Credits Le Ngoc Anh Required privilege Unauthenticat...

CVE-2025-54044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player allows Reflected XSS. This issue affects Elite Video Player: from n/a through 10.0.5...

CVE-2025-54044

CVE-2025-54044 is a reflected XSS vulnerability in WordPress Elite Video Player

CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

PT-2025-34011 · Unknown · Elite Video Player

Name of the Vulnerable Software and Affected Versions: Elite Video Player versions through 10.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Reflected Cross-site Scripting XSS. Recommendations: Update Elite Video Playe...

WordPress plugin Elite Video Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-26484

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

MAL-2025-8569 Malicious code in @malware-test-copsy-strum-agene-elite/test-mlw3-copsy-strum-agene-elite (npm)

The package @malware-test-copsy-strum-agene-elite/test-mlw3-copsy-strum-agene-elite was found to contain malicious code...

Malicious code in test-mlw2-owsen-elite (npm)

The package test-mlw2-owsen-elite was found to contain malicious code...

MAL-2025-35932 Malicious code in test-mlw2-owsen-elite (npm)

The package test-mlw2-owsen-elite was found to contain malicious code...

WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Anhchangmutrang in WordPress Plugin Elite Video Player versions = 10.0.5...

Leaked Shellter Elite Tool Now Fueling Infostealer Attacks Worldwide

A new report details how the advanced hacking tool Shellter Elite was leaked and is now being used…...

CVE-2025-30988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Stored XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-30988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Stored XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-30988

CVE-2025-30988 is a stored XSS in the WordPress plugin Elite Video Player ≤ 10.0.5 caused by improper input neutralization during web page generation. Public sources (Red Hat, CVE records, Patchstack) confirm the affected product and version range and consistently describe the same vulnerability ...

CVE-2025-30988 WordPress Elite Video Player plugin <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Stored XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

PT-2025-25672 · Unknown · Elite Video Player

Name of the Vulnerable Software and Affected Versions: Elite Video Player versions through 10.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables attackers to inject malicio...