CVE-2025-31046 WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor Pro: from n/a through 2.29...

PT-2026-1304

Name of the Vulnerable Software and Affected Versions LoginWP - Pro versions through 4.0.8.5 Description A missing authorization issue exists in LoginWP - Pro, allowing access to functionality that is not properly constrained by Access Control Lists ACLs. This could allow unauthorized access to...

PT-2026-1302

Name of the Vulnerable Software and Affected Versions Dokan Pro versions through 3.14.5 Description A flaw exists in Dokan Pro that allows for Stored Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. An attacker could potentially inject...

WordPress plugin LoginWP - Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

PT-2026-1263

Name of the Vulnerable Software and Affected Versions WPvibes AnyWhere Elementor Pro versions through 2.29 Description An authorization issue exists in WPvibes AnyWhere Elementor Pro, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update WPvibe...

WordPress plugin Dokan Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

WordPress plugin LoginWP - Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

PT-2026-1303

Name of the Vulnerable Software and Affected Versions LoginWP - Pro versions through 4.0.8.5 Description A missing authorization issue exists in LoginWP - Pro. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update LoginWP -...

WordPress plugin AnyWhere Elementor Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-53594

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinde...

CVE-2025-53594 Qfinder Pro, Qsync, QVPN

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinde...

CVE-2025-53594 Qfinder Pro, Qsync, QVPN

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinde...

CVE-2025-53594

CVE-2025-53594 is a path-traversal vulnerability affecting QNAP products. A local attacker who has a user account can exploit the issue to read contents of unexpected files or system data. The vulnerability is reported across Qfinder Pro Mac, Qsync for Mac, and QVPN Device Client for Mac, with fi...

QNAP Systems多款产品 安全漏洞

QNAP Systems Qsync and others are products of China Weilian Technology QNAP Systems.QNAP Systems Qsync is a file synchronization service for synchronizing files and folders between NAS and other devices.QNAP Systems Qfinder Pro Mac is a desktop assistant for macOS QNAP Systems QVPN Device Client ...

PT-2026-1094

Name of the Vulnerable Software and Affected Versions Qfinder Pro Mac versions prior to 7.13.0 Qsync for Mac versions prior to 5.1.5 QVPN Device Client for Mac versions prior to 2.2.8 Description A path traversal issue exists that could allow a local attacker with a user account to read the...

PT-2026-21475

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSP Paint Shop Pro file parser. A remote attacker can trigger an integer overflow in the read creator block function by providing a specially crafted PSP image file. This...

CVE-2025-28973

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...

CVE-2025-28973

Summary of CVE-2025-28973: The vulnerability is a Path Traversal flaw in the WordPress plugin “AA-Team Pro Bulk Watermark Plugin for WordPress” (also referred to as Pro Bulk Watermark Plugin for WordPress) affecting versions up to 2.0. The root cause is insufficient sanitization of user-supplied ...

CVE-2025-28973 WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...

WordPress Ads Pro plugin <= 4.95 - Unauthenticated SQL Injection via site_id vulnerability

Unauthenticated SQL Injection via siteid vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ads Pro versions = 4.95...