1223 matches found
WordPress plugin Smart Icons For WordPress 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-31786
Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through = 2.8.4...
CVE-2025-31786
CVE-2025-31786 describes a Missing Authorization vulnerability in the Simple Icons plugin (WordPress), affecting versions up to 2.8.4. The entry notes a CVSS v3.1 base score of 5.3 (medium) and indicates exploitation would involve access control misconfigurations, but there are no public details ...
CVE-2025-31786 WordPress Simple Icons plugin <= 2.8.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through = 2.8.4...
CVE-2025-31786 WordPress Simple Icons plugin <= 2.8.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Travis Simple Icons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple Icons: from n/a through 2.8.4...
PT-2025-14172 · Unknown · Travis Simple Icons
Name of the Vulnerable Software and Affected Versions: Travis Simple Icons versions through 2.8.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 2.8.4,...
WordPress plugin Simple Icons 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso in WordPress Plugin Flag Icons versions = 2.2...
CVE-2025-31575
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Vasilis Triantafyllou Flag Icons language-icons-flags-switcher allows Stored XSS.This issue affects Flag Icons: from n/a through = 2.2...
CVE-2025-31575 WordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Vasilis Triantafyllou Flag Icons language-icons-flags-switcher allows Stored XSS.This issue affects Flag Icons: from n/a through = 2.2...
CVE-2025-31575
Technical details for CVE-2025-31575 are not disclosed in the provided documents; the corpus does not specify affected products, versions, root cause, impact, or fix beyond the high-level description.
CVE-2025-31575 WordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Vasilis Triantafyllou Flag Icons language-icons-flags-switcher allows Stored XSS.This issue affects Flag Icons: from n/a through = 2.2...
WordPress plugin Flag Icons 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
Malicious code in snap-design-system-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1670 Malicious code in snap-design-system-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-1450 Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-hover’ parameter in all versions up to, and including, 3.3.5 due to insufficient input...
WordPress File Icons Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin File Icons versions = 2.1...
[SECURITY] Fedora 40 Update: gotify-desktop-1.3.7-4.fc40
Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...
CVE-2024-6309
The Attachment File Icons AF Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.3. This is due to missing nonce validation in the 'afioverview' function and missing file type validation in the 'uploadicons' function...