Lucene search
+L

771 matches found

Vivaldi Security Advisories
Vivaldi Security Advisories
•added 2025/12/10 11:48 a.m.•22 views

Minor update(3) for Vivaldi Android Browser 7.7

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the second 7.7 minor update: RegressionTablet Does not...

8.8CVSS5.9AI score0.22327EPSS
SaveExploits10References1
Patchstack
Patchstack
•added 2025/12/08 6:45 a.m.•32 views

WordPress Flex QR Code Generator plugin <= 1.2.7 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ryan Kozak in WordPress Plugin Flex QR Code Generator versions = 1.2.7...

9.8CVSS5.3AI score0.00734EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/07 6:05 a.m.•21 views

CVE-2025-12673

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS6.6AI score0.00734EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/06 6:30 a.m.•17 views

EUVD-2025-201530

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS7.2AI score0.00734EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/06 6:15 a.m.•22 views

CVE-2025-12673

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS0.00734EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/06 5:49 a.m.•54 views

CVE-2025-12673 Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS0.00734EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/06 5:49 a.m.•53 views

CVE-2025-12673

CVE-2025-12673 affects the WordPress plugin Flex QR Code Generator (versions up to ≤ 1.2.6; notes also reference ≤ 1.2.7). The root cause is missing file type validation in update_qr_code(), enabling unauthenticated users to upload arbitrary files via the logo upload path. Attacks can store uploa...

9.8CVSS6.6AI score0.00734EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/06 5:49 a.m.•13 views

CVE-2025-12673 Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS6.5AI score0.00734EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/06 12:00 a.m.•27 views

PT-2025-49333

Name of the Vulnerable Software and Affected Versions Flex QR Code Generator plugin for WordPress versions up to and including 1.2.6 Description The Flex QR Code Generator plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation. This occurs in the...

9.8CVSS7.2AI score0.00734EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/06 12:00 a.m.•1 views

CVE-2025-12673: Unrestricted Upload of File with Dangerous Type

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS6.3AI score0.00734EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/06 12:00 a.m.•23 views

WordPress plugin Flex QR Code Generator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS6.8AI score0.00734EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/12/01 12:00 a.m.•15 views

The vulnerability of Google Chrome’s Lens component allows a hacker to replace the user interface.

The vulnerability of the Lens component in Google Chrome browser is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to replace the user interface using a specially created QR code...

7.5CVSS5.8AI score0.0014EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
•added 2025/11/15 3:50 a.m.•19 views

CVE-2024-13983

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6.3CVSS6.5AI score0.0014EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/14 3:30 a.m.•12 views

EUVD-2024-55076

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6.3CVSS5.9AI score0.0014EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•2 views

CVE-2024-13983: URL Redirection to Untrusted Site

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6.3CVSS5.7AI score0.0014EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/11 6:30 a.m.•17 views

EUVD-2025-60952

The USB Qr Code Scanner For Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the settings page. This makes it possible for unauthenticated attackers to update the plugin's settings...

4.3CVSS5.2AI score0.00151EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/11/11 3:30 a.m.•21 views

CVE-2025-12588 USB Qr Code Scanner For Woocommerce <= 1.0.0 - Cross-Site Request Forgery to Settings Update

The USB Qr Code Scanner For Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the settings page. This makes it possible for unauthenticated attackers to update the plugin's settings...

4.3CVSS0.00151EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/11/11 1:05 a.m.•20 views

WordPress USB Qr Code Scanner For Woocommerce plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin USB Qr Code Scanner For Woocommerce versions = 1.0.0...

4.3CVSS6.9AI score0.00151EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•1 views

CVE-2025-12588: Cross-Site Request Forgery (CSRF)

The USB Qr Code Scanner For Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the settings page. This makes it possible for unauthenticated attackers to update the plugin's settings...

4.3CVSS5.7AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•16 views

PT-2025-46277

Name of the Vulnerable Software and Affected Versions USB Qr Code Scanner For Woocommerce plugin for WordPress versions prior to 1.0.1 Description The USB Qr Code Scanner For Woocommerce plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is a result of a lack of nonce...

4.3CVSS6.5AI score0.00151EPSS
SaveExploits0References5
Rows per page
Query Builder