499 matches found
WordPress plugin ShortcodeHub 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress ShortcodeHub plugin <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via author_link_target Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via authorlinktarget Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin ShortcodeHub - MultiPurpose Shortcode Builder versions = 1.7.1...
pam-1.7.1-3.1 on GA media (moderate)
pam-1.7.1-3.1 on GA media Announcement ID: openSUSE-SU-2025:15478-1 Rating: moderate Cross-References: CVE-2024-10041 CVSS scores: CVE-2024-10041 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2024-10041 SUSE : 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N...
OPENSUSE-SU-2025:15477-1 pam-1.7.1-3.1 on GA media
These are all security issues fixed in the pam-1.7.1-3.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2025-48060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute...
Medium: jq
Issue Overview: jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for...
OPENSUSE-SU-2025:15256-1 pam-1.7.1-1.1 on GA media
These are all security issues fixed in the pam-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15277-1 jupyter-panel-1.7.1-1.1 on GA media
These are all security issues fixed in the jupyter-panel-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-49507
Deserialization of Untrusted Data vulnerability in LoftOcean CozyStay cozystay allows Object Injection.This issue affects CozyStay: from n/a through 1.7.1...
CVE-2025-49507
CVE-2025-49507 corresponds to a PHP Object Injection in the WordPress CozyStay theme. Multiple sources confirm CozyStay versions prior to 1.7.1 are affected by a deserialization of untrusted data vulnerability that can lead to code execution. Public advisories consistently cite CozyStay < 1.7....
PT-2025-24655 · Loftocean · Loftocean Cozystay
Name of the Vulnerable Software and Affected Versions: LoftOcean CozyStay versions prior to 1.7.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the...
WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme CozyStay versions 1.7.1...
WordPress Borderless – Elementor Addons and Templates plugin <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Robert DeVore in WordPress Plugin Borderless versions = 1.7.1...
CVE-2025-39498
Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds Premium allows Retrieve Embedded Sensitive Data.This issue affects Spotlight - Social Media Feeds Premium: from n/a through 1.7.1...
CVE-2025-39498 WordPress Spotlight - Social Media Feeds (Premium) plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds Premium allows Retrieve Embedded Sensitive Data.This issue affects Spotlight - Social Media Feeds Premium: from n/a through 1.7.1...
CVE-2025-39498
CVE-2025-39498 concerns WordPress plugin Spotlight Social Feeds (Premium)
PT-2025-22890 · Unknown · Spotlight - Social Media Feeds
Name of the Vulnerable Software and Affected Versions: Spotlight - Social Media Feeds Premium versions 1.7.1 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This affects the Spotlight - Social Media...
CVE-2024-0434
The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbmnewplacesave' function in all versions up to, and including, 1.7.1. This makes it possible for...
CVE-2024-38691
Cross-Site Request Forgery CSRF vulnerability in Metorik Metorik – Reports & Email Automation for WooCommerce metorik-helper allows Cross Site Request Forgery.This issue affects Metorik – Reports & Email Automation for WooCommerce: from n/a through = 1.7.1...