CVE-2025-53571

CVE-2025-53571 describes a Missing Authorization vulnerability in the WordPress HAPPY plugin (versions ≤ 1.0.6). The issue arises from incorrectly configured access control, enabling authorization failure that affects the HAPPY plugin. CVSS 3.1 shows a base score of 6.5 (Medium) with network atta...

CVE-2025-53571 WordPress HAPPY Plugin <= 1.0.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HAPPY: from n/a through 1.0.6...

CVE-2025-8290

The List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access a...

Linux Distros Unpatched Vulnerability : CVE-2019-19977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer...

CVE-2025-8290

The List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access a...

PT-2025-35188

Name of the Vulnerable Software and Affected Versions: The List Subpages plugin for WordPress versions up to and including 1.0.6 Description: The List Subpages plugin for WordPress is susceptible to Stored Cross-Site Scripting through the title parameter. Insufficient input sanitization and outpu...

CVE-2025-48320

Cross-Site Request Forgery CSRF vulnerability in cuckoohello 百度分享按钮 baidushare-wp allows Stored XSS.This issue affects 百度分享按钮: from n/a through = 1.0.6...

WordPress HAPPY plugin <= 1.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Denver Jackson in WordPress Plugin HAPPY versions = 1.0.6...

Drupal AI SEO Link Advisor 安全漏洞

Drupal AI SEO Link Advisor is an AI model calling plugin for the Drupal community. A security vulnerability exists in Drupal AI SEO Link Advisor versions prior to 1.0.6 that stems from the presence of a server-side request forgery vulnerability...

WordPress plugin WPBookit 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

WordPress plugin Temporarily Hidden Content 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Affiliate Reviews Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-53285

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Website Flip Add & Replace Affiliate Links for Amazon add-replace-affiliate-links-for-amazon allows Stored XSS.This issue affects Add & Replace Affiliate Links for Amazon: from n/a through =...

CVE-2025-53285

CVE-2025-53285 concerns the WordPress plugin Add & Replace Affiliate Links for Amazon. The supplied documents confirm a stored Cross‑Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation, affecting versions up to 1.0.6. The CVSS details (AV:N/AC:L/P...

WordPress plugin Hello FSE Blog Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Malicious code in arc-offsec-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10c818d61d5a433e8603351eaeaa1329d8a7365d5c6b8497143cf7c8e5c1f9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-49280

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magty magty allows PHP Local File Inclusion.This issue affects Magty: from n/a through = 1.0.6...

CVE-2025-49280 WordPress Magty theme <= 1.0.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magty magty allows PHP Local File Inclusion.This issue affects Magty: from n/a through = 1.0.6...

CVE-2025-30931

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shamil Shafeev «Подсказки» от DaData.ru dadata-ru allows Stored XSS.This issue affects «Подсказки» от DaData.ru: from n/a through = 1.0.6...

CVE-2025-30931

CVE-2025-30931 is a Stored XSS in the WordPress plugin «Подсказки» от DaData.ru (DaData.ru). Affected versions are from n/a through 1.0.6; the vulnerability arises from improper input neutralization during web page generation. CVSS v3.1 base score is 5.9 (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L). Exp...