1380 matches found
PT-2025-38744
Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description CubeCart, an ecommerce software solution, has an issue in the product reviews feature. User-supplied input is not properly sanitized before display. An attacker can submit HTML tags within the revi...
PT-2025-38956
Name of the Vulnerable Software and Affected Versions CridioStudio ListingPro Reviews versions through 1.6 Description An authorization issue exists in CridioStudio ListingPro Reviews due to incorrectly configured access control security levels. This allows for exploitation of the system...
CVE-2025-47570
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews.This issue affects WooCommerce Photo Reviews: from n/a through = 1.3.13...
CVE-2025-47570
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews.This issue affects WooCommerce Photo Reviews: from n/a through = 1.3.13...
CVE-2025-47570 WordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews.This issue affects WooCommerce Photo Reviews: from n/a through = 1.3.13...
CVE-2025-47570 WordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews.This issue affects WooCommerce Photo Reviews: from n/a through = 1.3.13...
CVE-2025-47570
CVE-2025-47570 is a Cross-Site Scripting vulnerability in villatheme WooCommerce Photo Reviews (affecting WooCommerce Photo Reviews up to version 1.3.13). The issue arises from improper neutralization of input during web page generation, per the CVE details and Red Hat/WordPress CVE entries. Publ...
PT-2025-36762
Name of the Vulnerable Software and Affected Versions: villatheme WooCommerce Photo Reviews versions through 1.3.13 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, also known as Cross-site Scripting. Recommendations: Update villatheme...
WordPress plugin WooCommerce Photo Reviews 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
CVE-2024-8860 Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions
The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction, tforderstatuseditfunction, tforderbulkactioneditfunction,...
CVE-2025-53565
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Widget for Google Reviews business-reviews-wp allows PHP Local File Inclusion.This issue affects Widget for Google Reviews: from n/a through = 1.0.15...
CVE-2025-53565
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Widget for Google Reviews business-reviews-wp allows PHP Local File Inclusion.This issue affects Widget for Google Reviews: from n/a through = 1.0.15...
CVE-2025-53565 WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Widget for Google Reviews business-reviews-wp allows PHP Local File Inclusion.This issue affects Widget for Google Reviews: from n/a through = 1.0.15...
CVE-2025-53565 WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Widget for Google Reviews business-reviews-wp allows PHP Local File Inclusion.This issue affects Widget for Google Reviews: from n/a through = 1.0.15...
CVE-2025-53565
CVE-2025-53565 concerns the WordPress plugin Widget for Google Reviews (RadiusTheme) and is triggered by an improper control of filename for include/require statements, i.e., a PHP Remote File Inclusion that allows PHP Local File Inclusion. Affected software: RadiusTheme Widget for Google Reviews...
PT-2025-33986 · WordPress · Radiustheme Widget For Google Reviews
Name of the Vulnerable Software and Affected Versions: RadiusTheme Widget for Google Reviews versions through 1.0.15 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File...
WordPress plugin Widget for Google Reviews 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2025-54730
Missing Authorization vulnerability in PARETO Digital Embedder for Google Reviews embedder-for-google-reviews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embedder for Google Reviews: from n/a through = 1.7.3...
CVE-2025-54730
Missing Authorization vulnerability in PARETO Digital Embedder for Google Reviews embedder-for-google-reviews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embedder for Google Reviews: from n/a through = 1.7.3...
