CVE-2025-62752

CVE-2025-62752 is a DOM/Stored XSS vulnerability in the Calendar.online / Kalender.digital WordPress plugin (affected: Calendar.online / Kalender.digital

WordPress Nonaki – Drag and Drop Email Template builder and Newsletter plugin for WordPress plugin <= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Custom Fields vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Nonaki versions = 1.0.11...

Conjure Position Department Service Quality Evaluation System 安全漏洞

Conjure Position Department Service Quality Evaluation System is a position department service quality evaluation system from China Star Space Conjure. A security vulnerability exists in Conjure Position Department Service Quality Evaluation System version 1.0.11 and earlier versions, which...

WordPress plugin Movie Database 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Movie Database plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by FX Patchstack in WordPress Plugin Movie Database versions = 1.0.11...

PT-2024-14459 · Keap · Keap Official Opt-In Forms

Name of the Vulnerable Software and Affected Versions: Keap Official Opt-in Forms versions 1.0.11 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

CVE-2023-45772

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Proofreading plugin = 1.0.11 versions...

VMware Reactor Netty 安全漏洞

VMware Reactor Netty is a VMware USA company that provides non-blocking and backpressure-ready TCP/HTTP/UDP/QUIC clients and servers based on the Netty framework. A security vulnerability exists in VMware Reactor Netty versions 1.0.11 through 1.0.23, which stems from logging headers in the presen...

PT-2022-14615 · WordPress · Free Live Chat Support

Name of the Vulnerable Software and Affected Versions: Free Live Chat Support plugin for WordPress versions up to, and including 1.0.11 Description: The issue is due to missing nonce protection on the livesupporti settings function found in the /livesupporti.php file. This allows unauthenticated...

libEMF Resource Management Error Vulnerability

libEMF is a library for generating enhanced metafiles. A resource management error vulnerability exists in libEMF 1.0.11 and earlier versions. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No detailed...

PT-2020-12905 · Ecma +2 · Libemf +2

Name of the Vulnerable Software and Affected Versions: libEMF aka ECMA-234 Metafile Library versions 1.0.11 and earlier Description: The issue allows out-of-bounds memory access. Recommendations: For libEMF aka ECMA-234 Metafile Library versions 1.0.11 and earlier, at the moment, there is no...