CVE-2025-32539

CVE-2025-32539 is a Reflected Cross-Site Scripting vulnerability in WooCommerce – Store Exporter (store-exporter) for versions up to 2.7.4. The issue is publicly tracked with a CVSS v3.1 base score of 7.1 (HIGH), attack vector NETWORK, requires user interaction, and has CHANGED scope with low con...

WordPress plugin WooCommerce – Store Exporter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-16063 · Woocommerce · Woocommerce – Store Exporter

Name of the Vulnerable Software and Affected Versions: WooCommerce – Store Exporter versions 2.7.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, nri-nagios, sbom-convert, opentelemetry-operator, pgtimetable, grafana-mimir, sbom-scorecard, spire-server, opentelemetry-collector, kubeflow-katib, ctop, multus-cni, ini-file, rclone, golangci-lint, terraform-provider-sendgrid,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, nri-nagios, sbom-convert, opentelemetry-operator, pgtimetable, grafana-mimir, sbom-scorecard, spire-server, opentelemetry-collector, kubeflow-katib, ctop, multus-cni, ini-file, rclone, golangci-lint, terraform-provider-sendgrid,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: nri-nagios, ansible-operator, liquibase-package-manager, libnvidia-container, dockerize, traefik, golangci-lint, nodetaint, cluster-autoscaler, jitsucom-jitsu, extism, ytt, prometheus-fips, opa-fips-envoy, pdfcpu, sonobuoy, go-md2man, velero-plugin-for-csi-fips,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nri-nagios, ansible-operator, liquibase-package-manager, libnvidia-container, dockerize, traefik, golangci-lint, nodetaint, cluster-autoscaler, jitsucom-jitsu, extism, ytt, prometheus-fips, opa-fips-envoy, pdfcpu, sonobuoy, go-md2man, velero-plugin-for-csi-fips,...

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-32251

CVE-2025-32251 concerns the Jetpack Feedback Exporter WordPress plugin. The entry states an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability that could allow Retrieve Embedded Sensitive Data, affecting Jetpack Feedback Exporter versions up to 1.23. CVSS 3.1...

CVE-2025-32251 WordPress Jetpack Feedback Exporter <= 1.23 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter allows Retrieve Embedded Sensitive Data. This issue affects Jetpack Feedback Exporter: from n/a through 1.23...

CVE-2025-32251 WordPress Jetpack Feedback Exporter plugin <= 1.23 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

PT-2025-15007 · WordPress · Jetpack Feedback Exporter

Name of the Vulnerable Software and Affected Versions: Jetpack Feedback Exporter versions 1.23 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For Jetpack...

WordPress plugin Jetpack Feedback Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Export All Posts, Products, Orders, Refunds & Users plugin <= 2.13 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Webbernaut in WordPress Plugin WP Ultimate Exporter versions = 2.13...

AZL-58422 CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

AZL-58413 CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

MAL-2025-2174 Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2022-46146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and...