CVE-2024-56261

CVE-2024-56261 is a Stored XSS in the WordPress plugin Project Showcase (GS Projects). Affected: Project Showcase from n/a through 1.1.1. Root cause is improper neutralization of input during web page generation. Impact is stored cross-site scripting that can affect authenticated users (Contribut...

PT-2025-2480

Name of the Vulnerable Software and Affected Versions: Rara Theme Elegant Pink versions 1.3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the...

WordPress plugin Google Adsense & Banner Ads by AdsforWP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-1450 · Storeapps · Putler Connector For Woocommerce

Name of the Vulnerable Software and Affected Versions: Putler Connector for WooCommerce versions n/a through 2.12.0 Description: A Missing Authorization issue is present in the Putler / Storeapps Putler Connector for WooCommerce. This issue allows for unauthorized access. Recommendations: For...

PT-2025-2473 · WordPress · Wp Mobile Menu

Name of the Vulnerable Software and Affected Versions: WP Mobile Menu versions n/a through 2.8.4.3 Description: A Cross-Site Request Forgery CSRF issue affects the WP Mobile Menu, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For...

WordPress plugin Floating Action Buttons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-2466 · Fs Code · Fs Poster

Name of the Vulnerable Software and Affected Versions: FS Poster versions n/a through 6.5.8 Description: A Cross-Site Request Forgery CSRF issue is present in FS-code FS Poster, allowing Cross Site Request Forgery attacks. Recommendations: For versions n/a through 6.5.8, as a temporary workaround...

PT-2025-1480 · Unknown · Schema App Structured Data

Name of the Vulnerable Software and Affected Versions: Schema App Structured Data versions 1.23.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Schema App Structured Data, which allows exploiting incorrectly configured access control security levels...

WordPress plugin Elegant Pink 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2025-34363

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists in the packet set ring and packet notifier functions within the net/packet module. This occurs when packet set ring releases po-bind lock, allowing another thre...

PT-2025-40079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the networking subsystem related to phylink. The issue involves a potential race condition when serializing concurrent writes to pl-phydev with the...

PT-2025-34589

Name of the Vulnerable Software and Affected Versions: jqlang versions prior to 1.7 Description: A vulnerability was determined in jqlang jq. The run jq tests function within the jq test.c file of the JSON Parser component is affected. Manipulation can lead to a reachable assertion. The attack...

PT-2025-32407 · Gnu +1 · Gnu Cflow +1

Name of the Vulnerable Software and Affected Versions: GNU cflow versions up to 1.8 Description: A critical vulnerability exists in GNU cflow up to version 1.8. The issue is located in the yylex function within the c.c file of the Lexer component and leads to a buffer overflow. Local access is...

CVE-2024-56227

Missing Authorization vulnerability in WP Royal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1001...

CVE-2024-56224 WordPress Ledenbeheer plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ledenbeheer Ledenbeheer ledenbeheer-external-connection allows Stored XSS.This issue affects Ledenbeheer: from n/a through = 2.1.0...

PT-2024-33640 · Storeapps · Storeapps Smart Manager

Name of the Vulnerable Software and Affected Versions: StoreApps Smart Manager versions n/a through 8.45.0 Description: The issue is related to a Missing Authorization vulnerability in StoreApps Smart Manager. This allows for unauthorized access. Recommendations: For versions n/a through 8.45.0,...

WordPress plugin WPLMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2024-36764 · Searchiq · Searchiq

Name of the Vulnerable Software and Affected Versions: SearchIQ versions n/a through 4.6 Description: A Cross-Site Request Forgery CSRF issue is found in SearchIQ. This problem impacts versions of SearchIQ up to 4.6. Recommendations: For versions n/a through 4.6, update to a version later than 4....

PT-2024-36769 · Unknown · Kintpv Wooconnect

Name of the Vulnerable Software and Affected Versions: Kintpv Wooconnect versions n/a through 8.129 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inje...

WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin GeoDirectory versions = 2.3.84...