CVE-2025-29006

CVE-2025-29006 describes a Missing Authorization vulnerability in Direct Checkout for WooCommerce Lite, affecting version range from n/a up to 1.0.3. The CVSS 3.1 base score is 5.3 (Network, Low attack complexity, Pr& Permission: None, Confidentiality: None, Integrity: Low, Availability: None). P...

CVE-2025-30942

CVE-2025-30942 is a stored XSS vulnerability in OTWthemes’ WordPress plugin Post Custom Templates Lite . The description cites Improper Neutralization of Input During Web Page Generation as the root cause, enabling cross-site scripting via input handled by the plugin. Affected versions are listed...

CVE-2025-30942 WordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Post Custom Templates Lite post-custom-templates-lite allows Stored XSS.This issue affects Post Custom Templates Lite: from n/a through = 1.14...

CVE-2025-30942 WordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Post Custom Templates Lite post-custom-templates-lite allows Stored XSS.This issue affects Post Custom Templates Lite: from n/a through = 1.14...

CVE-2025-49076

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a...

PT-2025-24140 · Weblizar · Weblizar Hr Management Lite

Name of the Vulnerable Software and Affected Versions: weblizar HR Management Lite versions prior to 3.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions prior to...

WordPress plugin The Plus Addons for Elementor Page Builder Lite 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin The Plus...

WordPress plugin Post Custom Templates Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin Modern Events Calendar Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

WordPress plugin Direct Checkout for WooCommerce Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-24168 · Otwthemes · Otwthemes Post Custom Templates Lite

Name of the Vulnerable Software and Affected Versions: OTWthemes Post Custom Templates Lite versions 1.14 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

WordPress plugin HR Management Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress HR Management Lite plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Hiro Code016Hiro in WordPress Plugin HR Management Lite versions = 3.6...

PT-2025-23991 · WordPress · Modern Events Calendar Lite

Name of the Vulnerable Software and Affected Versions: Modern Events Calendar Lite plugin for WordPress versions up to, and including, 7.21.9 Description: The issue is related to Full Path Disclosure due to improper or insufficient validation of the id property when exporting calendars. This allo...

WordPress WP-Lister Lite for eBay plugin <= 3.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin WP-Lister Lite for eBay versions = 3.8.3...

CVE-2025-46455

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IndigoThemes WP HRM LITE wp-hrm-lite-human-resource-management-system allows SQL Injection.This issue affects WP HRM LITE: from n/a through = 1.1...

CVE-2025-46455

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IndigoThemes WP HRM LITE wp-hrm-lite-human-resource-management-system allows SQL Injection.This issue affects WP HRM LITE: from n/a through = 1.1...

CVE-2025-46455 WordPress WP HRM LITE <= 1.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IndigoThemes WP HRM LITE allows SQL Injection. This issue affects WP HRM LITE: from n/a through 1.1...

CVE-2025-46455 WordPress WP HRM LITE plugin <= 1.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IndigoThemes WP HRM LITE wp-hrm-lite-human-resource-management-system allows SQL Injection.This issue affects WP HRM LITE: from n/a through = 1.1...

CVE-2025-46455

CVE-2025-46455 corresponds to an SQL Injection in IndigoThemes WordPress WP HRM LITE (&lt;= 1.1). The vulnerability arises from improper neutralization of input in WP HRM LITE, affecting versions up to 1.1. Base CVSSv3.1 score is 9.3 (CRITICAL) with network attack vector, no privileges required, ...