WordPress Add Custom Codes plugin <= 4.80 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Certus Cybersecurity in WordPress Plugin Add Custom Codes versions = 4.80...

SUSE CVE-2022-50858

In the Linux kernel, the following vulnerability has been resolved: mmc: alcor: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

SUSE CVE-2022-50886

In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

SUSE CVE-2023-54164

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix isoconn related locking and validity issues sk-skstate indicates whether isopisk-conn is valid. Operations that check/update skstate and access conn should hold locksock, otherwise they can race. The order of...

SUSE CVE-2023-54321

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in deviceadd I got the following null-ptr-deref report while doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 CPU: 2 PID: 278 Comm: 37-i2c-ds248...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992841 advisory. In the Linux kernel, the following vulnerability has been resolved: chardev: fix error handling in cdevdeviceadd While doing fault injection test, I got the followin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993196 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'addwidgetnode' As 'kobjectadd' may allocated memory for...

WordPress plugin Add Custom Codes 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-54329

Name of the Vulnerable Software and Affected Versions ViitorCloud Technologies Pvt Ltd Add Featured Image Custom Link versions through 2.0.0 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS condition. Thi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992915 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatportadd In atatportadd, the return value of...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2025-2623)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992862)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992862 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rioadddevice fails Patch series rapidio: fix three possible...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993219)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993219 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sastransportportadd Port is allocated by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993195 advisory. In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in dorbdadd when rbddevcreate fails If getting an ID or setting up a wo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992800 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993236 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993295 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatdevadd In atatdevadd, the return value of...

PT-2025-54340

Name of the Vulnerable Software and Affected Versions SaifuMak Add Custom Codes versions through 4.80 Description An authorization issue exists in SaifuMak Add Custom Codes due to incorrectly configured access control security levels. This allows for exploitation of the application. Recommendatio...

WordPress plugin Signature Add-On for Gravity Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A security vulnerabilit...

WordPress plugin Add Custom Codes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...