6508 matches found
WordPress Starfish Review Generation & Marketing plugin <= 3.1.19 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by LVT-tholv2k in WordPress Plugin Starfish Review Generation & Marketing versions = 3.1.19...
WordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by anhchangmutrang in WordPress Plugin Mediavine Control Panel versions = 2.10.6...
WordPress PropertyHive plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin PropertyHive versions = 2.1.2...
WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by stealthcopter in WordPress Plugin Essential Addons for Elementor versions = 6.1.9...
GHSA-FHG8-QXH5-7Q3W vulnerabilities
Vulnerabilities for packages: nats-server, nats-top...
CVE-2025-30215 vulnerabilities
Vulnerabilities for packages: nats-server, nats-top...
GHSA-FHG8-QXH5-7Q3W vulnerabilities
Vulnerabilities for packages: nats-top, nats-server, telegraf, nats-top-fips, prometheus-nats-exporter, nats-server-fips...
CVE-2025-30215 vulnerabilities
Vulnerabilities for packages: nats-top, nats-server, telegraf, nats-top-fips, prometheus-nats-exporter, nats-server-fips...
SUSE CVE-2025-24358
gorilla/csrf provides Cross Site Request Forgery CSRF prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cross-origin requests only when it believes...
DEBIAN-CVE-2025-24358
gorilla/csrf provides Cross Site Request Forgery CSRF prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cross-origin requests only when it believes...
Top 10 for LLM & Gen AI Project Ranked by OWASP
Trend Micro has become a Gold sponsor of the OWASP Top 10 for LLM and Gen AI Project, merging cybersecurity expertise with OWASP's collaborative efforts to address emerging AI security risks. This partnership underscores Trend Micro's unwavering commitment to advancing AI security, ensuring a...
WordPress TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter vulnerability
Authenticated Administrator+ SQL Injection via 's' Parameter vulnerability discovered by broccoli in WordPress Plugin TS Poll versions = 2.4.6...
WordPress Clearfy Cache plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy' vulnerability
Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcrclearfy' vulnerability discovered by Whit Taylor in WordPress Plugin Clearfy Cache versions = 2.3.2...
WordPress Photo Gallery by 10Web plugin <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter vulnerability
WordPress Photo Gallery by 10Web plugin = 1.8.34 Reflected Cross-Site Scripting via 'imageid' Parameter vulnerability discovered by Ivan Kuzymchak in WordPress Plugin Photo Gallery by 10Web versions = 1.8.34...
CVE-2025-31399
Cross-Site Request Forgery CSRF vulnerability in Chandan Garg CG Scroll To Top cg-scroll-to-top allows Stored XSS.This issue affects CG Scroll To Top: from n/a through = 3.5...
WordPress RS Elements Elementor Addon plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin RS Elements Elementor Addon versions = 1.1.5...
WordPress Simple WP Events plugin <= 1.8.17 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin Simple WP Events versions = 1.8.17...
WordPress Web2application Plugin <= 6.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Web2application versions = 6.1...
WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Sync Posts versions = 1.0...