11783 matches found
CVE-2025-8720 Plugin README Parser <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via target Parameter
The Plugin README Parser plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘target’ parameter in all versions up to, and including, 1.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2025-6184
The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter used in the getsubmittedassignments function in all versions up to, and including, 3.7.0 due to insufficient escaping on the user supplied parameter an...
CVE-2025-8013 Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests ...
CVE-2025-6025
CVE-2025-6025 concerns the Order Tip for WooCommerce plugin (WordPress) with unauthenticated input validation failure on the data-tip attribute, affecting all versions up to 1.5.4. The issue enables callers to submit tip values (including negative amounts) that can yield unauthorized discounts, p...
CVE-2025-8992 mtons mblog cross-site request forgery
A vulnerability has been found in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...
PT-2025-33424 · Mtons · Mtons Mblog
Name of the Vulnerable Software and Affected Versions: mtons mblog versions up to 3.5.0 Description: A cross-site request forgery issue exists in mtons mblog. The issue affects some unknown functionality and can be exploited remotely. The exploit has been publicly disclosed. Recommendations: Upda...
PT-2025-33423 · Linlinjava · Litemall
Name of the Vulnerable Software and Affected Versions: linlinjava litemall versions up to 1.8.0 Description: A vulnerability was identified in linlinjava litemall. The issue affects an unknown functionality within the /admin/config/express file of the Business Logic Handler component. Manipulatio...
PT-2025-33436 · Mtons · Mtons Mblog
Name of the Vulnerable Software and Affected Versions: mtons mblog versions prior to 3.5.1 Description: A vulnerability exists in mtons mblog up to version 3.5.0. The issue affects an unknown function within the /register endpoint and leads to information exposure through error messages. The atta...
PT-2025-33479 · Unknown · Reel Sektör Hazine Ve Risk Yönetimi Yazılımı
Name of the Vulnerable Software and Affected Versions: Reel Sektör Hazine ve Risk Yönetimi Yazılımı versions through 1.0.0.4 Description: Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in Reel Sektör Hazine ve Risk Yönetimi Yazılımı, allowi...
CVE-2025-49573
Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-52767
Cross-Site Request Forgery CSRF vulnerability in lisensee NetInsight Analytics Implementation Plugin netinsight-analytics-implementation-plugin allows Cross Site Request Forgery.This issue affects NetInsight Analytics Implementation Plugin: from n/a through = 1.0.3...
Malicious code in @zalastax/nolb-_up (npm)
The package @zalastax/nolb-up was found to contain malicious code...
Malicious code in @zalastax/nolb-react-up (npm)
The package @zalastax/nolb-react-up was found to contain malicious code...
Malicious code in down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb (npm)
The package down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb was found to contain malicious code...
MAL-2025-13838 Malicious code in @zalastax/nolb-react-up (npm)
The package @zalastax/nolb-react-up was found to contain malicious code...
MAL-2025-18695 Malicious code in down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb (npm)
The package down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb was found to contain malicious code...
MAL-2025-37183 Malicious code in trello-power-up-tutorial-part-one (npm)
The package trello-power-up-tutorial-part-one was found to contain malicious code...
Malicious code in up-tsu (npm)
The package up-tsu was found to contain malicious code...