WordPress plugin Review Stream 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

SUSE CVE-2025-31135

Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is...

CVE-2025-31135

Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is...

CVE-2025-31135

Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is...

CVE-2025-31135

CVE-2025-31135 affects Go-Guerrilla SMTP Daemon. Before version 1.6.7, when ProxyOn is enabled, the PROXY command may be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol supports only a single initial PROXY header; subsequent PROXY commands are treated a...

CVE-2025-31135 Go-Guerrilla SMTP Daemon allows the PROXY command to be sent multiple times

Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is...

PT-2025-14443

Name of the Vulnerable Software and Affected Versions Go-Guerrilla SMTP Daemon versions prior to 1.6.7 Description The issue allows a client to spoof its IP address when the proxy protocol is being used. This occurs because the PROXY command is accepted multiple times, with later invocations...

CVE-2025-0281

A stored cross-site scripting XSS vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of window.location.href witho...

CVE-2025-27344

Cross-Site Request Forgery CSRF vulnerability in filipstepanov Phee's LinkPreview linkpreview allows Cross Site Request Forgery.This issue affects Phee's LinkPreview: from n/a through = 1.6.7...

CVE-2025-27344 WordPress Phee's LinkPreview Plugin <= 1.6.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in filipstepanov Phee's LinkPreview linkpreview allows Cross Site Request Forgery.This issue affects Phee's LinkPreview: from n/a through = 1.6.7...

CVE-2025-27344

CVE-2025-27344 describes a CSRF vulnerability in the WordPress plugin “Phee's LinkPreview” (Phee’s LinkPreview). The issue affects from n/a through 1.6.7 and is categorized with CVSS 3.1 (base score 4.3, MEDIUM). The Connected documents confirm the vulnerability type (CSRF) and affected software/...

WordPress Kush Micro News Plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Kush Micro News versions = 1.6.7...

CVE-2024-32563

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VikBooking Hotel Booking Engine & PMS allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.6.7...

CVE-2024-2006

The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.7 via deserialization of untrusted input in the outpostshortcodemetaboxmarkup function. This makes it...

CVE-2025-24741

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in KB Support KB Support. This issue affects KB Support: from n/a through 1.6.7...

CVE-2025-24734

Missing Authorization vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Privilege Escalation.This issue affects Better Find and Replace: from n/a through = 1.6.7...

CVE-2025-24741

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in LOGON KB Support kb-support.This issue affects KB Support: from n/a through = 1.6.7...

CVE-2025-24741

CVE-2025-24741 – Open Redirect in KB Support WordPress plugin affecting versions

CVE-2025-24741 WordPress KB Support plugin <= 1.6.7 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in KB Support KB Support. This issue affects KB Support: from n/a through 1.6.7...

WordPress Better Find and Replace plugin <= 1.6.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Better Find and Replace versions = 1.6.7...