CVE-2025-43837 WordPress Total Donations <= 3.0.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in binti76 Total Donations allows Reflected XSS.This issue affects Total Donations: from n/a through 3.0.8...

CVE-2025-43837: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in binti76 Total Donations total-donations allows Reflected XSS.This issue affects Total Donations: from n/a through = 3.0.8...

WordPress plugin Total Donations 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-22061 · Unknown · Binti76 Total Donations

Name of the Vulnerable Software and Affected Versions: binti76 Total Donations versions 3.0.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers ...

MAL-2025-3829 Malicious code in fca-shaon-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3447878cef2f81b5cf93c10db61caf84d11600727979b580e0f7611302bb645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30174

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

PT-2025-21027 · Undefined · Undefined

New CVE-2025-99999999 CVSS:11.0 Supercritical: if an attacker can mind-control an administrator, they can perform actions as that administrator leading to total compromise. This should be prioritized over all other risks and best practices...

CVE-2025-3897: Improper Limitation of a Pathname to a Restricted Directory

The EUCookieLaw plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.7.2 via the 'filegetcontents' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

April Linux Patch Wednesday

AprilLinux Patch Wednesday. Total vulnerabilities: 251. 164 in the Linux Kernel. No vulnerabilities show signs of being exploited in the wild. There are 7 vulnerabilities that appear to have publicly available exploits. For 2 vulnerabilities, exploit code with detailed explanation is available on...

CVE-2025-4119

A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be...

WordPress Total Donations <= 3.0.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Total Donations versions = 3.0.8...

CVE-2025-32513 WordPress Total processing card payments for WooCommerce plugin <= 7.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in totalprocessing Nomupay Payment Processing Gateway allows Reflected XSS. This issue affects Nomupay Payment Processing Gateway: from n/a through 7.1.6...

CVE-2025-32209

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in totalprocessing Nomupay Payment Processing Gateway totalprocessing-card-payments allows Path Traversal.This issue affects Nomupay Payment Processing Gateway: from n/a through = 7.1.5...

CVE-2025-32209

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in totalprocessing Nomupay Payment Processing Gateway totalprocessing-card-payments allows Path Traversal.This issue affects Nomupay Payment Processing Gateway: from n/a through = 7.1.5...

CVE-2025-32209

CVE-2025-32209: Authenticated arbitrary file download in Total processing card payments for WooCommerce (Totalprocessing). The Wordfence vulnerability detail confirms impact and that a patch is available; upgrade to the patched release to mitigate.

WordPress plugin Total processing card payments for WooCommerce 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in th...

CVE-2025-30894

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through = 1.79.262...

CVE-2025-30894

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through = 1.79.262...

CVE-2025-30894

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through = 1.79.262...

WordPress WP Fast Total Search plugin <= 1.79.262 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Fast Total Search versions = 1.79.262...