WordPress Trending/Popular Post Slider and Widget plugin <= 1.8.6 - Backdoor vulnerability

Backdoor vulnerability discovered by ? in WordPress Plugin Trending/Popular Post Slider and Widget versions = 1.8.6...

CVE-2025-7663

The CVE describes an unauthorized-access vulnerability in the WordPress Ovatheme Events Manager plugin, caused by missing capability checks in the /class-ovaem-ajax.php file. Affected versions are up to and including 1.8.6. The flaw allows unauthenticated attackers to perform privileged actions s...

PT-2024-33622 · Unknown · Sam Glover Client Power Tools Portal

Name of the Vulnerable Software and Affected Versions: Sam Glover Client Power Tools Portal versions 1.8.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-32544 · Unknown · Social Share Buttons By Supsystic +1

Name of the Vulnerable Software and Affected Versions: Supsystic Slider versions 1.8.6 and earlier Supsystic Social Share Buttons versions 2.2.9 and earlier Description: The issue is related to a Missing Authorization vulnerability in Supsystic Slider and Supsystic Social Share Buttons. This allo...

PT-2024-14168 · Wbw · Product Table By Wbw

Name of the Vulnerable Software and Affected Versions: Product Table by WBW versions 1.8.6 and earlier Description: A Cross Site Request Forgery CSRF issue affects the Product Table by WBW. This type of issue allows an attacker to trick a user into performing unintended actions on a web applicati...

PT-2023-27813 · Patreon · Patreon Wordpress

Name of the Vulnerable Software and Affected Versions: Patreon WordPress versions 1.8.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

CVE-2019-19023

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform...

ruby: DoS vulnerability in the REXML module

The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service CPU consumption via an XML document with recursively nested entities, aka an "XML entity explosion."...