WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

PT-2025-53098

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions through 3.5.7.1 Description An authorization issue exists in Sunshine Photo Cart that allows exploitation of incorrectly configured access control security levels. Recommendations Update Sunshine Photo Cart to a...

PT-2025-53090

Name of the Vulnerable Software and Affected Versions Spiffy Plugins Spiffy Calendar versions through 5.0.7 Description An authorization issue exists in Spiffy Plugins Spiffy Calendar spiffy-calendar, allowing exploitation due to incorrectly configured access control security levels...

PT-2025-53265

Name of the Vulnerable Software and Affected Versions Virusdie versions n/a through 1.1.6 Description An authorization issue exists in Virusdie, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Virusdie to a version later than 1.1.6...

PT-2025-53275

Name of the Vulnerable Software and Affected Versions Watu Quiz versions through 3.4.5 Description An authorization issue exists in Watu Quiz that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Watu Quiz to a version later than 3.4.5...

PT-2025-53274

Name of the Vulnerable Software and Affected Versions Gora Tech Cooked versions through 1.11.2 Description An authorization issue exists in Gora Tech Cooked, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Gora Tech Cooked to a version...

PT-2025-53266

Name of the Vulnerable Software and Affected Versions Addonify versions prior to and including 2.0.4 Description An authorization issue exists in the Addonify addonify-quick-view component, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2025-53276

Name of the Vulnerable Software and Affected Versions totalsoft TS Poll versions through 2.5.3 Description An authorization issue exists in totalsoft TS Poll poll-wp due to incorrectly configured access control security levels. This allows for potential exploitation of the system. Recommendations...

PT-2025-53270

Name of the Vulnerable Software and Affected Versions Funnelforms versions prior to 3.9 Description An authorization issue exists in Funnelforms Free that allows exploitation of incorrectly configured access control security levels. Recommendations Update to version 3.9 or later...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient validation of the serviceAccount path in the HashiCorp Vault authentication process. An attacker can access and exfiltrate arbitrary files from the node's filesystem by creating or modifying a...

PT-2025-52567

Name of the Vulnerable Software and Affected Versions HappyFiles Pro versions through 1.8.1 Description An authorization issue exists in HappyFiles Pro, allowing exploitation due to incorrectly configured access control security levels. This can lead to unauthorized access. Recommendations Update...

PT-2025-52566

Name of the Vulnerable Software and Affected Versions Mapro Collins Magazine Edge versions through 1.13 Description An authorization issue exists in Mapro Collins Magazine Edge due to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendation...

Security update for grafana

This update for grafana fixes the following issues: grafana was updated from version 11.5.5 to 11.5.10: Security issues fixed: CVE-2025-64751: Dropped experimental implementation of authorization Zanzana server/client version 11.5.10 bsc1254113 CVE-2025-47911: Fixed parsing HTML documents version...

CVE-2025-47382 Incorrect Authorization in Boot

Memory corruption while loading an invalid firmware in boot loader...

WordPress plugin ListingPro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

Microsoft Partner Center 授权问题漏洞

Microsoft Partner Center is an online platform from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Partner Center that stems from improper authorization and could allow an unauthorized attacker to elevate privileges over the network...

WordPress plugin PostX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress Essential Blocks plugin <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure vulnerability

Missing Authorization To Authenticated Author+ Information Disclosure vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Essential Blocks for Gutenberg versions = 5.7.2...

CVE-2025-64246 WordPress Accessibility by AudioEye plugin <= 1.0.49 - Broken Access Control vulnerability

Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility by AudioEye: from n/a through = 1.0.49...

Ningyuanda TC155 授权问题漏洞

The Ningyuanda TC155 is an IP camera from the Chinese company Ningyuanda. An authorization issue vulnerability exists in the Ningyuanda TC155 version 57.0.2.0, which stems from improper authentication of the RTSP real-time video streaming endpoint component, which could lead to unauthorized acces...