PT-2025-4104

Name of the Vulnerable Software and Affected Versions MagicForm plugin for WordPress versions up to, and including, 1.6.2 Description The issue arises from a missing capability check on the plugin's AJAX actions, allowing authenticated attackers with Subscriber-level access and above to invoke...

PT-2025-1961

Name of the Vulnerable Software and Affected Versions Custom Related Posts plugin for WordPress versions up to, and including, 1.7.3 Description The issue allows unauthorized access and modification of data due to a missing capability check on three AJAX actions. This makes it possible for...

CVE-2024-53537

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager...

CVE-2023-38739

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2023-38739 IBM Sterling B2B Integrator cross-site request forgery

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2023-38739

IBM Sterling B2B Integrator is affected by CVE-2023-38739, affecting version ranges 6.0.0.0–6.1.2.5 and 6.2.0.0–6.2.0.3. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that could allow an attacker to perform malicious, unauthorized actions transmitted from a trusted user. The prima...

CVE-2023-38739: Cross-Site Request Forgery (CSRF)

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

PT-2025-5248 · Sablab · Sablab Internal Link Builder

Name of the Vulnerable Software and Affected Versions: Alessandro Piconi - SabLab Internal Link Builder versions n/a through 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user...

PT-2025-2959 · Easyvirt · Easyvirt Dcscope +1

Name of the Vulnerable Software and Affected Versions: EasyVirt DCScope versions 8.6.0 and earlier EasyVirt CO2Scope versions 1.3.0 and earlier Description: The issue allows remote authenticated attackers with low privileges to perform various unauthorized actions. This includes adding an admin...

PT-2025-2966

Name of the Vulnerable Software and Affected Versions OpenPanel versions 0.2.1 through 0.3.4 Description The issue allows attackers to execute a directory traversal in File Actions of the File Manager. Recommendations For OpenPanel versions 0.2.1 through 0.3.4, consider restricting access to the...

CVE-2024-53537: Improper Limitation of a Pathname to a Restricted Directory

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager...

IBM Sterling B2B Integrator Cross-site Request Forgery Vulnerability

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffe...

CVE-2024-53537

OpenPanel versions 0.2.1 through 0.3.4 are vulnerable to a directory traversal vulnerability within the File Manager component. An attacker can construct a malicious HTTP request to exploit the Copy and View functions (specifically in File Actions ), allowing them to access, view, and manipulate ...

Malicious code in web-actions-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d40edcae4c894042717491d36e69b45f4b012916fc7b7dbd64e5901b3b6dda8 Any computer that has this package installed or running should be considered...

MAL-2025-699 Malicious code in web-actions-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d40edcae4c894042717491d36e69b45f4b012916fc7b7dbd64e5901b3b6dda8 Any computer that has this package installed or running should be considered...

CVE-2025-22220

VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user...

CVE-2025-23367

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...

CVE-2024-12709

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-12709

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-12709: Cross-Site Request Forgery (CSRF)

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...