Lucene search
+L

34015 matches found

Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•27 views

PT-2025-52142

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.3.1...

7AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•21 views

WordPress plugin PDF for Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.5AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•11 views

CVE-2025-60084: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•9 views

CVE-2025-60081: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affects PDF for Contact Form 7: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•12 views

CVE-2025-60080: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•8 views

CVE-2025-64231: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact Form 7 PDF, Google Sheet & Database rtwwcfp-wordpress-contact-form-7-pdf allows Using Malicious Files.This issue affects WordPress Contact Form 7 PDF, Google Sheet & Database: from n/a through =...

9.9CVSS5.8AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•28 views

PT-2025-51989

Name of the Vulnerable Software and Affected Versions Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress versions through 2.7.10 Description The WordPress Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin contains a Stored Cross-Site...

6.4CVSS5.5AI score0.00255EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•9 views

CVE-2025-60083: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•20 views

PT-2025-52139

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affects PDF for Contact Form 7: from n/a through = 6.3.4...

7AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•18 views

WordPress plugin PDF Invoice Builder for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

8.8CVSS6.6AI score0.00431EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•23 views

PT-2025-52174

Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact Form 7 PDF, Google Sheet & Database rtwwcfp-wordpress-contact-form-7-pdf allows Using Malicious Files.This issue affects WordPress Contact Form 7 PDF, Google Sheet & Database: from n/a through =...

6.9AI score0.00316EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•19 views

WordPress plugin WordPress Contact Form 7 PDF 安全漏洞

...

9.9CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•22 views

PT-2025-52140

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.3.1...

7AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•19 views

WordPress plugin PDF for WPForms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.8CVSS6.7AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•7 views

CVE-2025-60082: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•8 views

CVE-2025-12885: Improper Neutralization of Input During Web Page Generation

The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sanitizepdfsrc function regex bypass in all versions up to, and including, 2.7.10 due to insufficient input sanitization and output escaping. This makes i...

6.4CVSS6.1AI score0.00255EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2025-53000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6...

8.5CVSS6AI score0.0026EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•4 views

SUSE SLED15: libpoppler-cpp0 / libpoppler-cpp0-32bit / libpoppler-devel / etc (SUSE-SU-2025:4434-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4434-1 advisory. - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap...

2.1CVSS6AI score0.0017EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•4 views

SUSE SLED15 / SLES15 Security Update : poppler (SUSE-SU-2025:4439-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4439-1 advisory. - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap bsc1252337 Tenable...

2.1CVSS6AI score0.0017EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/17 9:16 p.m.•27 views

CVE-2025-53000

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution...

8.5CVSS0.0026EPSS
SaveExploits1References6
Rows per page
Query Builder