CVE-2025-59591 WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability

Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through = 7.6.33...

CVE-2025-59591 WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability

Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through = 7.6.33...

CVE-2025-57969

CVE-2025-57969 affects Hide WP Toolbar (WordPress plugin) up to version 2.7. Root cause: Missing Authorization / access control misconfiguration enabling unauthorized actions. Documented CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, with Impact: integrity low, confidentiality none, avai...

CVE-2025-57969 WordPress Hide WP Toolbar Plugin <= 2.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hide WP Toolbar: from n/a through 2.7...

CVE-2025-58014 WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through = 6.7.0.64...

CVE-2025-58016 WordPress CF7 Submissions Plugin <= 0.26 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Codexpert, Inc CF7 Submissions cf7-submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CF7 Submissions: from n/a through = 0.26...

CVE-2025-58016

CVE-2025-58016 affects CF7 Submissions (WordPress plugin). The vulnerability is Missing Authorization due to misconfigured access control levels, with a CVSS v3.1 base score of 4.3 (Medium) and an observation that exploitation could occur without user interaction. Connected documents confirm the ...

CVE-2025-58030 WordPress Page-list Plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Page-list page-list allows Stored XSS.This issue affects Page-list: from n/a through = 5.8...

CVE-2025-58030 WordPress Page-list Plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Page-list page-list allows Stored XSS.This issue affects Page-list: from n/a through = 5.8...

CVE-2025-58223 WordPress VoucherPress Plugin <= 1.5.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chris Taylor VoucherPress voucherpress allows Stored XSS.This issue affects VoucherPress: from n/a through = 1.5.7...

CVE-2025-58253 WordPress Real Estate Manager Plugin <= 7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows DOM-Based XSS.This issue affects Real Estate Manager: from n/a through = 7.3...

CVE-2025-58690

CVE-2025-58690 is a CSRF vulnerability in Doliconnect for WordPress that can lead to Stored XSS. Affected versions are listed as n/a through 9.5.7; CVSS v3.1 base score 7.1 (High). Patch status shown in connected data indicates a fix in Doliconnect 9.5.7 or later. Remediation: update Doliconnect ...

WordPress plugin CF7 Submissions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress plugin Page-list 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

Sound4 PULSE-ECO AES67 安全漏洞

The Sound4 PULSE-ECO AES67 is a radio station audio processing device from Sound4 France. A security vulnerability exists in the Sound4 PULSE-ECO AES67 version 1.22, which stems from a firmware update mechanism that does not validate the integrity of manual.sh, and could lead to remote code...

WordPress plugin JSM file_get_contents Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site scripting...

WordPress plugin Hide WP Toolbar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress plugin Doliconnect 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

Blackmagic Design ATEM Mini Pro 安全漏洞

Blackmagic Design ATEM Mini Pro is a live video streaming device from Blackmagic Design, USA. A security vulnerability exists in the Blackmagic Design ATEM Mini Pro version 2.7 that originates from an undocumented Telnet service accepting unauthenticated commands in clear text, which could allow ...

Blackmagic Design ATEM Mini Pro 安全漏洞

Blackmagic Design ATEM Mini Pro is a live video streaming device from Blackmagic Design, Inc. A security vulnerability exists in the Blackmagic Design ATEM Mini Pro version 2.7 that originates from an unauthenticated Telnet service exposing sensitive device information, which could lead to...