144 matches found
PT-2025-39580
Name of the Vulnerable Software and Affected Versions Galaxy Weblinks Post Featured Video versions through 1.7 Description A Cross-Site Request Forgery issue exists in Galaxy Weblinks Post Featured Video. This allows for Cross Site Request Forgery attacks. Recommendations At the moment, there is ...
CVE-2025-32183
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through = 6.8...
CVE-2025-32183
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through = 6.7.1...
PT-2025-14965 · Unknown · Galaxy Weblinks Video Playlist For Youtube
Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks Video Playlist For YouTube versions through 6.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...
CVE-2025-31871
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through = 3.6...
CVE-2025-31872
Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through = 3.6...
CVE-2025-31871
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through = 3.6...
CVE-2025-31872
Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through = 3.6...
CVE-2025-31872
No technical details about CVE-2025-31872 are provided in the connected documents. Initial description mentions a Missing Authorization issue affecting WP Clone any post type (up to 3.4), but there are no confirmed product/version/root‑cause data or fixes in the supplied sources. Monitor for upda...
PT-2025-14248 · WordPress · Galaxy Weblinks Wp Clone Any Post Type
Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks WP Clone any post type versions n/a through 3.4 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing attacks. This vulnerability can be...
PT-2025-14249 · WordPress · Galaxy Weblinks Wp Clone
Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks WP Clone versions n/a through 3.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can be used to clone any post...
Joomla weblinks-categories Unauthenticated SQL Injection / Arbtirary File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla weblinks-categories Unauthenticated SQL Injection Arbitrary File Read', 'Description' = %q Joomla versions 3.2.2 and below are vulnerable ...
global-weblinks.com Cross Site Scripting vulnerability OBB-3804207
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-45653
Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...
CVE-2023-45653
Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...
CVE-2023-45653
CVE-2023-45653 covers a CSRF vulnerability in the WordPress plugin “Video Playlist For YouTube” by Galaxy Weblinks, affected in versions
CVE-2023-45653 WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...