CVE-2025-22792

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2...

CVE-2021-25255

Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service...

CVE-2021-25254

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar...

CVE-2021-25254

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar...

CVE-2021-25255 Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service...

CVE-2021-25255

CVE-2021-25255 affects Yandex Browser Lite for Android prior to version 21.1.0. The issue allows remote attackers to cause a denial of service. Connected documents confirm Android app impact but do not reveal root cause specifics beyond the denial of service and the vulnerable version range. Reme...

CVE-2021-25254 Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar...

CVE-2021-25254 Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar...

CVE-2021-25254

Yandex Browser Lite for Android before 21.1.0 is vulnerable to address-bar spoofing (authentication bypass). The issue is described in multiple sources (e.g., PT-2021-7166) as a spoofing vulnerability with no clearly documented fixed version in the provided materials; exploitation status and spec...

Yandex Browser 安全漏洞

Yandex Browser is a desktop version of a web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser Lite for Android prior to version 21.1.0, which originates from a remote attacker who can spoof the address bar...

Yandex Browser 安全漏洞

Yandex Browser is a desktop version of a web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser Lite for Android prior to version 21.1.0, which originates from a remote attacker and can result in a denial of service...

CVE-2025-43838 WordPress Custom PC Builder Lite for WooCommerce <= 1.0.1 - Settings Change Vulnerability

Missing Authorization vulnerability in ChoPlugins Custom PC Builder Lite for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom PC Builder Lite for WooCommerce: from n/a through 1.0.1...

CVE-2025-22792

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2...

CVE-2025-22792 WordPress Js O3 Lite theme <= 1.5.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2...

CVE-2025-22792

CVE-2025-22792 applies to WordPress plugin Js O3 Lite (Jinwen Js O3 Lite), with Reflected XSS caused by improper input neutralization during web page generation. Affected: Js O3 Lite ≤ 1.5.8.2. CVSS 3.1 base score 7.1 (HIGH). Remediation: update to a version that includes a fix (no specific fixed...

CVE-2025-22792 WordPress Js O3 Lite theme <= 1.5.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2...

CVE-2025-48342

Cross-Site Request Forgery CSRF vulnerability in RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce woo-dynamic-pricing-discounts-lite allows Cross Site Request Forgery.This issue affects Dynamic Pricing & Discounts Lite for WooCommerce: from n/a through = 2.0.4...

CVE-2025-48232

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor allows Stored XSS.This issue affects Xpro Addons For Beaver Builder – Lite: from n/a through = 1.5.5...

CVE-2025-48232

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor allows Stored XSS.This issue affects Xpro Addons For Beaver Builder – Lite: from n/a through = 1.5.5...

CVE-2025-48342

CVE-2025-48342 is a CSRF vulnerability in the WordPress plugin Dynamic Pricing & Discounts Lite for WooCommerce , affecting versions up to 2.0.3 (vendor:RedefiningTheWeb). The issue allows unauthorized actions via CSRF. The public sources in the provided documents indicate a patch/version fix at ...