CVE-2025-31907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labib Ahmed Team Builder team-display allows Reflected XSS.This issue affects Team Builder: from n/a through = 1.3...

CVE-2025-32272

Cross-Site Request Forgery CSRF vulnerability in PickPlugins Wishlist wishlist allows Cross Site Request Forgery.This issue affects Wishlist: from n/a through = 1.0.46...

CVE-2025-32197

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in piotnetdotcom Piotnet Addons For Elementor piotnet-addons-for-elementor allows Stored XSS.This issue affects Piotnet Addons For Elementor: from n/a through = 2.4.36...

CVE-2025-32121

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through = 1.1.3...

CVE-2025-32261

Technical details for CVE-2025-32261 are not provided in the connected documents. Public information in this set does not specify affected versions, impact, or fixes. Monitor for updates from Patchstack/NVD or vendor advisories.

CVE-2024-51800

Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue affects Homey: from n/a through 2.4.1...

PT-2025-14950 · Surveyjs · Surveyjs

Name of the Vulnerable Software and Affected Versions: SurveyJS versions 1.12.20 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious script...

FreeBSD : MongoDB -- Unauthorized access to underlying data (30418b26-107f-11f0-8195-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 30418b26-107f-11f0-8195-b42e991fc52e advisory. [email protected] reports: A user authorized to access a view may be able to alter the intended collation...

CVE-2025-31873

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sheetdb SheetDB sheetdb allows Stored XSS.This issue affects SheetDB: from n/a through = 1.3.4...

CVE-2025-31733

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Boot Div WP Sitemap wpsitemap allows Stored XSS.This issue affects WP Sitemap: from n/a through = 1.0.0...

CVE-2025-30902

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ATL Software SRL AEC Kiosque aec-kiosque allows Reflected XSS.This issue affects AEC Kiosque: from n/a through = 1.9.3...

CVE-2025-30971

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows SQL Injection.This issue affects XV Random Quotes: from n/a through = 2.0.0...

CVE-2025-30622

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in torsteino PostMash postmash-custom allows SQL Injection.This issue affects PostMash: from n/a through = 1.0.3...

UBUNTU-CVE-2024-53868

Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.9, from 10.0.0 through 10.0.4. Users are recommended to upgrade to version 9.2.10 or 10.0.5, which fixes the issue...

Yubico YubiKey 安全漏洞

Yubico YubiKey is a hardware authentication device from the Swedish company Yubico. A security vulnerability exists in Yubico YubiKey versions 5.4.1 through 5.7.3, which stems from an incorrect implementation of the FIDO CTAP PIN/UV Auth Protocol Two, which could lead to partial signature...

CVE-2025-30807

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martin Nguyen Next-Cart Store to WooCommerce Migration nextcart-woocommerce-migration allows SQL Injection.This issue affects Next-Cart Store to WooCommerce Migration: from n/a through = 3.9.4...

CVE-2025-31852

Cross-Site Request Forgery CSRF vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Forgery.This issue affects Bulk Product Sync: from n/a through = 8.6...

CVE-2025-31840

Cross-Site Request Forgery CSRF vulnerability in digireturn Simple Fixed Notice dn-cookie-notice allows Cross Site Request Forgery.This issue affects Simple Fixed Notice: from n/a through = 1.6...

CVE-2025-31741

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Filtr8 Easy Magazine filtr8-magazine allows DOM-Based XSS.This issue affects Easy Magazine: from n/a through = 2.1.13...

CVE-2025-31817

CVE-2025-31817 affects BlockWheels (WPWheels) for WordPress. It is a DOM-based XSS caused by improper input neutralization during page generation, impacting BlockWheels versions n/a–1.0.1. Exploitation requires at least LOW privileged user with authentication (Contributor+). A fix exists in Block...