10274 matches found
CVE-2025-32261 WordPress Advanced All in One Admin Search by WP Spotlight <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight allows Cross Site Request Forgery. This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through 1.1.1...
CVE-2025-32188 WordPress Advanced Woo Labels plugin <= 2.15 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through = 2.15...
CVE-2025-32188
CVE-2025-32188 - Stored XSS in Advanced Woo Labels (WordPress plugin) Affected software: Advanced Woo Labels (a.k.a. Advanced Woo Labels – Product Labels for WooCommerce) versions up to 2.15 (per connected data; CVE notes up to 2.14). Root cause: Improper neutralization of input during web page g...
CVE-2025-32188 WordPress Advanced Woo Labels plugin <= 2.14 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels allows Stored XSS. This issue affects Advanced Woo Labels: from n/a through 2.14...
WordPress Advanced Woo Labels plugin <= 2.15 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by savphill in WordPress Plugin Advanced Woo Labels versions = 2.15...
PT-2025-14970 · Unknown · Illid Advanced Woo Labels
Name of the Vulnerable Software and Affected Versions: ILLID Advanced Woo Labels versions n/a through 2.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
WordPress plugin Advanced Woo Labels 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
CVE-2025-31753
Cross-Site Request Forgery CSRF vulnerability in Animesh Kumar Advanced Speed Increaser advanced-speed-increaser.This issue affects Advanced Speed Increaser: from n/a through = 2.2.1...
CVE-2025-31622
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Utkarsh Kukreti Advanced Typekit advanced-typekit allows Stored XSS.This issue affects Advanced Typekit: from n/a through = 1.0.1...
CVE-2025-31622 WordPress Advanced Typekit plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Utkarsh Kukreti Advanced Typekit allows Stored XSS. This issue affects Advanced Typekit: from n/a through 1.0.1...
CVE-2025-31622 WordPress Advanced Typekit plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Utkarsh Kukreti Advanced Typekit advanced-typekit allows Stored XSS.This issue affects Advanced Typekit: from n/a through = 1.0.1...
CVE-2025-31622
CVE-2025-31622: In the Advanced Typekit WordPress plugin (vulnerable:
CVE-2025-30548
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VarDump s.r.l. Advanced Post Search advanced-post-search allows Reflected XSS.This issue affects Advanced Post Search: from n/a through = 1.1.0...
WordPress plugin Advanced Typekit 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-3099 Advanced Search by My Solr Server <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to upda...
WordPress plugin Advanced Search by My Solr Server 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
The vulnerability of the configure_lttpr_mode_non_transparent() function in the DRI driver for AMD kernel-based Linux graphics cards allows a attacker to cause a service failure.
The vulnerability of the configurelttprmodenontransparent function in the DRI driver for AMD kernel-based Linux graphics cards is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
AMD NPU driver 输入验证错误漏洞
AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in the AMD NPU driver that stems from an integer overflow that could lead to an out-of-bounds write by a local attacker, impacting confidentiality, integrity, and availability...
The vulnerability of the `dm_update_mst_vcpi_slots_for_dsc()` function in the Direct Rendering Infrastructure (DRI) driver for AMD kernel-based Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the dmupdatemstvcpislotsfordsc function in the Direct Rendering Infrastructure DRI driver for AMD kernel-based Linux operating systems is related to insufficient validation of input data during division by zero. Exploiting this vulnerability can allow an attacker to cause a...
AMD NPU driver 输入验证错误漏洞
AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that originates from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting confidentiality, integrity, or availability...