WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Pop-Up Chop Chop versions = 2.1.7...

WordPress WP-OGP plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WP-OGP versions = 1.0.5...

WordPress Text Selection Color plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Text Selection Color versions = 1.6...

WordPress Clear Sucuri Cache plugin <= 1.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin Clear Sucuri Cache versions = 1.4...

WordPress WP Database Optimizer plugin <= 1.2.1.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Database Optimizer versions = 1.2.1.3...

CVE-2025-31432

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Chop Chop Pop-Up Chop Chop pop-up allows PHP Local File Inclusion.This issue affects Pop-Up Chop Chop: from n/a through = 2.1.7...

CVE-2025-31432 WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Chop Chop Pop-Up Chop Chop pop-up allows PHP Local File Inclusion.This issue affects Pop-Up Chop Chop: from n/a through = 2.1.7...

CVE-2025-31432

CVE-2025-31432 pertains to the WordPress plugin Pop-Up Chop Chop . The connected vulnerability details identify an authenticated, local file inclusion (LFI) flaw caused by improper control of the filename used in PHP include/require, enabling LFI on the plugin. Affected versions are up to 2.1.7, ...

CVE-2025-31432 WordPress Pop-Up Chop Chop <= 2.1.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Chop Chop Pop-Up Chop Chop allows PHP Local File Inclusion. This issue affects Pop-Up Chop Chop: from n/a through 2.1.7...

CVE-2025-31466 WordPress Duplicate Page and Post plugin <= 1.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Falcon Solutions Duplicate Page and Post duplicate-post-and-page allows Blind SQL Injection.This issue affects Duplicate Page and Post: from n/a through = 1.0...

WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin MicroPayments versions = 2.9.29...

WordPress Slider by BestWebSoft plugin <= 1.1.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by domiee13 in WordPress Plugin Slider by BestWebSoft versions = 1.1.0...

CVE-2025-31096

CVE-2025-31096 affects WordPress PostX (Post Grid Gutenberg Blocks) plugin. The WordPress plugin PostX versions up to 4.1.25 are vulnerable to a Cross-Site Scripting (Stored) flaw via inputs generated during web page rendering, enabling XSS in authenticated contexts. Remediation: upgrade to PostX...

PT-2025-13548

Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A heap-based buffer overflow issue has been identified, affecting the H5O msg flush function in the file src/H5Omessage.c. The manipulation of the oh argument leads to this issue. The attack requires loca...

PT-2025-13551

Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A problematic vulnerability was found in HDF5, affecting the function H5F accum free of the file src/H5Faccum.c. The manipulation of the argument overlap size leads to a heap-based buffer overflow. This...

WordPress plugin Pop-Up Chop Chop 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WPGuppy plugin <= 1.1.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WPGuppy versions = 1.1.3...

DEBIAN-CVE-2023-52998

In the Linux kernel, the following vulnerability has been resolved: net: fec: Use pagepoolputfullpage when freeing rx buffers The pagepoolreleasepage was used when freeing rx buffers, and this function just unmaps the page if mapped and does not recycle the page. So after hundreds of down/up the...

CVE-2023-52982

In the Linux kernel, the following vulnerability has been resolved: fscache: Use waitonbit to wait for the freeing of relinquished volume The freeing of relinquished volume will wake up the pending volume acquisition by using wakeupbit, however it is mismatched with waitvarevent used in...

UBUNTU-CVE-2023-52998

In the Linux kernel, the following vulnerability has been resolved: net: fec: Use pagepoolputfullpage when freeing rx buffers The pagepoolreleasepage was used when freeing rx buffers, and this function just unmaps the page if mapped and does not recycle the page. So after hundreds of down/up the...