CVE-2025-31768: Missing Authorization

Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Widget Manager Light: from n/a through = 1.18...

WordPress plugin OTWthemes Widget Manager Light 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-14734 · Otwthemes · Otwthemes Widget Manager Light

Name of the Vulnerable Software and Affected Versions: OTWthemes Widget Manager Light versions 1.18 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For OTWthemes Widget...

CVE-2025-31770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Content Manager Light content-manager-light allows Stored XSS.This issue affects Content Manager Light: from n/a through = 3.2...

CVE-2025-31770 WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Content Manager Light content-manager-light allows Stored XSS.This issue affects Content Manager Light: from n/a through = 3.2...

CVE-2025-31770 WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Content Manager Light allows Stored XSS. This issue affects Content Manager Light: from n/a through 3.2...

CVE-2025-31770

CVE-2025-31770 is a Stored XSS in Content Manager Light for WordPress, affecting versions up to 3.2. The issue arises during web page generation and requires authenticated access (Contributor+). The CVSS v3.1 base score is 6.5 (NETWORK access, LOW attack complexity, LOW privileges, UI required; c...

PT-2025-14156 · Otwthemes · Otwthemes Content Manager Light

Name of the Vulnerable Software and Affected Versions: OTWthemes Content Manager Light versions n/a through 3.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can injec...

WordPress plugin Content Manager Light 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2025-31834: Missing Authorization

Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through = 1.2.8...

CVE-2025-31833: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through = 1.2.8...

CVE-2025-31770: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Content Manager Light content-manager-light allows Stored XSS.This issue affects Content Manager Light: from n/a through = 3.2...

ISLOnline ISL Light Client Installed (Windows)

Binary data islonlineisllightclientwininstalled.nbin...

ISLOnline ISL Light Client Installed (Linux)

Binary data islonlineisllightclientnixinstalled.nbin...

ISLOnline ISL Light Client Installed (macOS)

Binary data islonlineisllightclientmacinstalled.nbin...

iio: light: vcnl4035: fix information leak in triggered buffer

...

netfilter: x_tables: fix LED ID check in led_tg_check()

...

Malicious code in rdocs-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d1b6fac6abdefe443e0bc5cf7425f5b8dd8b32080d8e429eb9c2031ca18b059 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1668 Malicious code in rdocs-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d1b6fac6abdefe443e0bc5cf7425f5b8dd8b32080d8e429eb9c2031ca18b059 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22313

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...