WordPress Content Security Policy Pro plugin <= 1.3.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Content Security Policy Pro versions = 1.3.5...

WordPress Ps Ads Pro plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Ps Ads Pro versions = 1.0.0...

WordPress plugin Content Security Policy Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-22762

CVE-2025-22762 concerns the WordPress plugin WordPress HelpDesk & Support Ticket System – Octrace Support. The vulnerability is a Stored Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected versions are from n/a through 1.2.7. The CVSS 3.1 bas...

CVE-2025-22762 WordPress Octrace Support Pro plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Octrace WordPress HelpDesk & Support Ticket System Plugin – Octrace Support octrace-support allows Stored XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace Support:...

Deserialization of Untrusted Data

Overview rasa-pro is a State-of-the-art open-core Conversational AI framework for Enterprises that natively leverages generative AI for effortless assistant development. Affected versions of this package are vulnerable to Deserialization of Untrusted Data by loading a maliciously crafted model in...

WordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Brizy Pro versions = 2.6.1...

WordPress Octrace Support Pro plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by UKO Patchstack Alliance in WordPress Plugin WordPress HelpDesk & Support Ticket System Plugin – Octrace Support versions = 1.2.7...

Emlog Pro Cross-Site Scripting Vulnerability (CNVD-2025-01706)

Emlog Pro is a lightweight blogging system that provides easy-to-use blog management features. A cross-site scripting vulnerability exists in Emlog Pro 2.4.3. The vulnerability originates from unknown functionality in the file /admin/twitter.php of the Subpage Handler component. An attacker can...

CVE-2024-11939

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘data’ parameter in all versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2024-11939 Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘data’ parameter in all versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

WordPress Gift Cards for WooCommerce Pro plugin <= 2.9.1 - Missing Authorization to Infinite Money Glitch vulnerability

Missing Authorization to Infinite Money Glitch vulnerability discovered by Ross Harper in WordPress Plugin Gift Cards for WooCommerce Pro versions = 2.9.1...

TXOne Portable Inspector 输入验证错误漏洞

TXOne Portable Inspector is a portable, installation-free security tool in the USB form factor from TXOne. A security vulnerability exists in TXOne Portable Inspector version 1.0.0 and earlier and Portable Inspector Pro Edition 1.0.0 and earlier, which stems from improper input validation and cou...

PT-2025-2786 · Txone Networks · Txone Networks Portable Inspector +1

Name of the Vulnerable Software and Affected Versions: TXOne Networks Portable Inspector version 1.0.0 TXOne Networks Portable Inspector Pro Edition version 1.0.0 Description: The issue is related to improper input validation in the Management Program of TXOne Networks Portable Inspector and...

WordPress plugin Cost Calculator Builder PRO SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress Cost Calculator Builder PRO plugin <= 3.2.15 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Cost Calculator Builder Pro versions = 3.2.15...

CVE-2025-22350

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpIndeed Ultimate Learning Pro allows SQL Injection.This issue affects Ultimate Learning Pro: from n/a through 3.9...

CVE-2025-22350

CVE-2025-22350 is an SQL Injection in the WordPress plugin Ultimate Learning Pro (WpIndeed Ultimate Learning Pro) affecting versions up to 3.9. The vulnerability stems from improper neutralization of special elements in SQL commands, enabling potential access to confidential data and impacting av...

CVE-2025-22350 WordPress Indeed Ultimate Learning Pro plugin <= 3.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpIndeed Ultimate Learning Pro allows SQL Injection.This issue affects Ultimate Learning Pro: from n/a through 3.9...

CVE-2025-22350 WordPress Indeed Ultimate Learning Pro plugin <= 3.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpIndeed Ultimate Learning Pro allows SQL Injection.This issue affects Ultimate Learning Pro: from n/a through 3.9...