WordPress plugin GDPR Cookie Notice 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-14152

Name of the Vulnerable Software and Affected Versions themeqx GDPR Cookie Notice versions 1.2.0 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For themeqx GDPR...

CVE-2025-31840: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in digireturn Simple Fixed Notice dn-cookie-notice allows Cross Site Request Forgery.This issue affects Simple Fixed Notice: from n/a through = 1.6...

Ubuntu: Security Advisory (USN-7396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:1062-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress XV Random Quotes plugin <= 2.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aiden in WordPress Plugin XV Random Quotes versions = 2.0.0...

CGA-HQP2-R4WH-3XX5

Bulletin has no description...

CGA-HPQW-H965-G2H5

Bulletin has no description...

CGA-F9X9-PF7Q-QQX4

Bulletin has no description...

CGA-5H5V-HVC8-Q5W8

Bulletin has no description...

CGA-893V-GWPR-HJCJ

Bulletin has no description...

CGA-44R8-V2M3-855M

Bulletin has no description...

CGA-94W3-V2GM-8J8Q

Bulletin has no description...

编号撤回

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

CVE-2025-22628 WordPress Filled In Plugin <= 1.9.2 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision Filled In filled-in allows Stored XSS.This issue affects Filled In: from n/a through = 1.9.2...

GitLab Enterprise Edition和GitLab Community Edition 跨站脚本漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A cross-site scripting vulnerability exists in GitLab Enterprise Edition and GitLab...

PT-2025-13198 · Gitlab · Gitlab Duo

Name of the Vulnerable Software and Affected Versions: GitLab Duo with Amazon Q versions 17.8 through 17.8.5 GitLab Duo with Amazon Q versions 17.9 through 17.9.2 GitLab Duo with Amazon Q versions 17.10 through 17.10.0 Description: An issue has been discovered in the GitLab Duo with Amazon Q that...

openSUSE Security Advisory (SUSE-SU-2025:1005-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-30350

creationtimestamp| type| source ---|---|--- 2025-03-26 14:52:55+00:00| published-proof-of-concept| https://github.com/directus/directus/security/advisories/GHSA-rv78-qqrq-73m5 2025-03-26 17:25:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8902 2025-03-26...

PT-2025-12863

Name of the Vulnerable Software and Affected Versions BWL Advanced FAQ Manager plugin for WordPress versions up to and including 2.1.4 Description The issue allows for unauthorized modification of data, potentially leading to a denial of service. This is due to a missing capability check on the b...