10804 matches found
WordPress plugin “Entry Views” cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2026-1710
Name of the Vulnerable Software and Affected Versions Entry Views versions prior to 1.0.1 Description The Entry Views plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'entry-views' shortcode. Insufficient input sanitization and output escaping on user-supplied...
CVE-2025-13729: Improper Neutralization of Input During Web Page Generation
The Entry Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'entry-views' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
WordPress Entry Views plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Entry Views versions = 1.0.0...
CVE-2026-0747
Devolutions Remote Desktop Manager versions 2025.3.24.0 through 2025.3.28.0 on Windows are vulnerable to a sensitive information exposure flaw. The issue resides in the TeamViewer entry dashboard component , where a defective masking feature allows an external observer to view a password on the s...
EUVD-2026-1563
An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper...
MINI-26C5-X6CC-96CR
Bulletin has no description...
CGA-64X8-X3HF-W3W8
Bulletin has no description...
EUVD-2026-1514
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pinpoll Pinpoll pinpoll allows Reflected XSS.This issue affects Pinpoll: from n/a through = 4.0.0...
EUVD-2026-1587
Not used...
CVE-2026-21694
Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...
yintibao Fun Print Mobile Unauthorized Access via Context Hijacking
Vulnerability Details Affected Vendor: yintibao Affected Product: Fun Print Mobile Affected Version: 6.05.15 Platform: ARM64 - Android CWE Classification: CWE-926: Improper Export of Android Application Components CVE ID: CVE-2025-15464 2. Vulnerability Description Exported Activity allows...
CVE-2026-0747: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or scree...
EUVD-2026-1453
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and download a full configuration archive. This archive contains sensitive files such as /etc/shadow,...
CGA-M9C4-MX87-79FQ
Bulletin has no description...
CGA-8P47-RPM5-VM79
Bulletin has no description...
CGA-4FPX-X3W2-4HFV
Bulletin has no description...
CGA-3VCX-Q795-MC44
Bulletin has no description...