CVE-2025-23468

CVE-2025-23468 affects WordPress plugin NotFound Essay Wizard (wpCRES) versions up to and including 1.0.6.4. The issue is a Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Affected component: wpCRES plugin for Essay Wizard; vulnerable versi...

CVE-2025-23468 WordPress Essay Wizard (wpCRES) plugin <= 1.0.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wrenchpilot Essay Wizard wpCRES essay-wizard-wpcres allows Reflected XSS.This issue affects Essay Wizard wpCRES: from n/a through = 1.0.6.4...

WordPress plugin NotFound Essay Wizard (wpCRES) 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Citrix Provisioning - Unable to add a new server to the Farm

Configuration Wizard shows warnings when admin tries to add a new PVS Server to the Farm. Error displayed: Errors have occured during the configuration process ConfigurationWizard.log located in C:\ProgramData\Citrix\Provisioning Services on the PVS Server shows the errors:...

CVE-2025-0801

The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This makes it possible for unauthenticated attackers to update the plugin's API...

PT-2025-9054 · WordPress · Ratemyagent Official

Name of the Vulnerable Software and Affected Versions: RateMyAgent Official plugin for WordPress versions up to and including 1.4.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This allows unauthenticate...

The vulnerability of the sub_422eb8() function in Linksys E8450 Wi-Fi router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogrammed software is related to the lack of measures taken to neutralize special elements used in the operating system’s command processing for handling the wizardstatus parameter. Exploiting this vulnerability...

CVE-2020-8482

Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data...

CVE-2024-25917

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodeRevolution WP Setup Wizard.This issue affects WP Setup Wizard: from n/a through 1.0.8.1...

CVE-2024-9491

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9549

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formEasySetupWizard/formEasySetupWizard2 of the file /goform/formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated...

PVS Citrix Virtual Desktops Setup Wizard fails to create every other machine

When using PVS Citrix Virtual Desktops Setup Wizard, it creates machines however every other machine fails to be created. This typically means either all even numbers machines or odd numbers machines fails to be created depending on what number you start with...

CVE-2024-9491

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9491 Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9491

CVE-2024-9491 affects the Configuration Wizard 2 installer (Silicon Labs/Silicon Configuration Wizard 2) and is caused by an uncontrolled DLL search path, enabling DLL hijacking. Impact described in sources as local escalation that could lead to privilege escalation and arbitrary code execution w...

Silicon Configuration Wizard 2 installer 代码问题漏洞

Silicon Configuration Wizard 2 installer is a Configuration Wizard 2 installer from Silicon Corporation. A security vulnerability exists in the Silicon Configuration Wizard 2 installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges...

PT-2025-3716 · Unknown · Configuration Wizard 2

Name of the Vulnerable Software and Affected Versions: Configuration Wizard 2 affected versions not specified Description: The issue is caused by an uncontrolled search path in the Configuration Wizard 2 installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation...

CVE-2024-57536

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizardstatus...

WordPress Essay Wizard (wpCRES) plugin <= 1.0.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Essay Wizard wpCRES versions = 1.0.6.4...

WordPress Solar Wizard Lite plugin <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Solar Wizard Lite versions = 1.2.4...