PT-2025-1971

Name of the Vulnerable Software and Affected Versions BoomBox Theme Extensions plugin for WordPress versions up to, and including, 1.8.0 Description The issue allows authenticated attackers with contributor-level and above permissions to include and execute arbitrary files on the server via the...

WordPress plugin BoomBox Theme Extensions has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

com.boozallen.aissemble:extensions-data-delivery-spark (>=1.13.0-rc6, <=2.0.0), com.boozallen.aissemble:extensions-metadata-service (>=1.13.0-rc6, <=2.0.0) +45 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.10)

org.apache.hive:hive-exec MAVEN version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.boozallen.aissemble:extensions-data-delivery-spark =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6,...

io.druid.extensions.contrib:druid-orc-extensions (>=0.10.0, <=0.12.3), org.apache.tajo:tajo-hive (>=0.11.2, <=0.11.3) potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.0.0)

org.apache.hive:hive-exec MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - io.druid.extensions.contrib:druid-orc-extensions =0.10.0, =0.11.2, =0.11.3 Source cves: CVE-2024-29869 Source...

CVE-2025-0353: Improper Neutralization of Input During Web Page Generation

The Divi Torque Lite – Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. Th...

io.druid.extensions.contrib:druid-orc-extensions (>=0.10.0, <=0.12.3) potentially affected by CVE-2024-23953 via org.apache.hive:hive-llap-common (2.0.0)

org.apache.hive:hive-llap-common MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-llap-common and may be impacted: - io.druid.extensions.contrib:druid-orc-extensions =0.10.0, =0.12.3 Source cves: CVE-2024-23953...

Extensions Component Bypass Substitution

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface...

Extensions Component Privilege Escalation

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

CVE-2025-24695

Server-Side Request Forgery SSRF vulnerability in HasThemes Extensions For CF7 allows Server Side Request Forgery. This issue affects Extensions For CF7: from n/a through 3.2.0...

CVE-2025-24695

Server-Side Request Forgery SSRF vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from n/a through = 3.2.0...

CVE-2025-24695 WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from n/a through = 3.2.0...

CVE-2025-24695 WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from n/a through = 3.2.0...

CVE-2025-23888

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through = 0.6...

CVE-2025-23888

CVE-2025-23888 refers to a Reflected XSS in the WordPress plugin NotFound Custom Page Extensions. The vulnerability arises from improper neutralization of input during web page generation, enabling injection of script through a page generation flow. Affected software/versions: Custom Page Extensi...

CVE-2025-23888 WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through = 0.6...

CVE-2025-23888 WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through = 0.6...

WordPress Plugin Custom Page Extensions: Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Plugin Extensions for CF7 – Code Issues and Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2025-5511 · Unknown · Hasthemes Extensions For Cf7

Name of the Vulnerable Software and Affected Versions: HasThemes Extensions For CF7 versions 3.2.0 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to perform Server Side Request Forgery. Recommendations: For versions 3.2.0 and...

CVE-2025-23888: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through = 0.6...