CVE-2023-32965

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CRUDLab Jazz Popups plugin = 1.8.7 versions...

CVE-2023-47530

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Page with Logs: from n/a through 1.8.7...

CVE-2025-30892

Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injection.This issue affects WpTravelly: from n/a through = 1.8.7...

PT-2025-14398 · Unknown · Wptravelly

Name of the Vulnerable Software and Affected Versions: WpTravelly versions 1.8.7 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches. Recommendations: For versions 1.8.7 and earlier, upda...

WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin WpTravelly versions = 1.8.7...

WordPress plugin WpTravelly 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-39219

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

CVE-2024-13699

The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter in all versions up to, and including, 1.8.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...

PT-2025-2248 · WordPress · Qi Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Qi Addons For Elementor versions 1.8.7 and earlier Description: The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the cursor parameter due to insufficient input sanitization and output escaping...

WordPress plugin Qi Addons For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2024-13694 WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function

The WooCommerce Wishlist High customization, fast setup,Free Elementor Wishlist, most features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the downloadpdffile function due to missing validation on a user controlled key. Th...

WordPress WooCommerce Wishlist plugin <= 1.8.7 - Unauthenticated IDOR via download_pdf_file Function vulnerability

Unauthenticated IDOR via downloadpdffile Function vulnerability discovered by Tim Coen in WordPress Plugin MC Woocommerce Wishlist versions = 1.8.7...

PT-2025-2245 · WordPress · Ti Woocommerce Wishlist

Name of the Vulnerable Software and Affected Versions: WooCommerce Wishlist plugin for WordPress versions up to, and including, 1.8.7 Description: The issue concerns a lack of validation on a user-controlled key in the download pdf file function, allowing unauthenticated attackers to extract data...

PT-2026-21539

Name of the Vulnerable Software and Affected Versions Libsixel versions prior to 1.8.7 Description A memory leak exists in Libsixel versions prior to 1.8.7, specifically within the malloc stub.c component. This leak could potentially lead to resource exhaustion. Recommendations Update to a versio...

UBUNTU-CVE-2024-10975

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

DreamCatcher Life 安全漏洞

Dreamcatcher Life is an application from Chuango, Germany that allows remote control of various wireless smart devices. A security vulnerability exists in DreamCatcher Life v1.8.7, which stems from incorrect access control during firmware updates and downloads...

WordPress StreamWeasels Twitch Integration Plugin <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)

Software StreamWeasels Twitch Integration Type Plugin Vulnerable versions = 1.8.6 Fixed in 1.8.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9897 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 924e5605229d Credits Peter...

PT-2024-33225 · Ilife · Ilife

Name of the Vulnerable Software and Affected Versions: ILIFE version 1.8.7 Description: An issue in the ILIFE app allows a remote attacker to obtain sensitive information via the firmware update process. This occurs during the firmware update process, potentially exposing sensitive data...

ILIFE com.ilife.home.global 安全漏洞

ILIFE com.ilife.home.global is a driver from ILIFE, Inc. A security vulnerability exists in ILIFE com.ilife.home.global version 1.8.7. A remote attacker could exploit the vulnerability to obtain sensitive information through the firmware update process...

CVE-2024-43972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pagelayer Team PageLayer allows Stored XSS.This issue affects PageLayer: from n/a through 1.8.7...