WordPress plugin IDonate – Blood Donation, Request And Donor Management System 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorization issue...

WordPress plugin Better Find and Replace – AI-Powered Suggestions 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... An authorization iss...

CVE-2025-43498

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43498

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43498

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43498

CVE-2025-43498 describes an authorization issue resolved by improved state management in Apple products. The fixed products and versions are macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and visionOS 26.1. The issue could allow an app to access sensitive user...

CVE-2025-43498

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43498

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data...

PT-2025-44906

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 visionOS versions prior to 26.1 Description An authorization issue exists due to improved state management...

WordPress plugin SiteSEO 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorizati...

Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities

Summary IBM Guardium Data Security Center has addressed these vulnerabilties with an update. Vulnerability Details CVEID:CVE-2025-41249 DESCRIPTION: The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized...

PT-2025-44602

Name of the Vulnerable Software and Affected Versions Rank Math SEO versions through 1.0.252.1 Description An authorization issue exists in Rank Math SEO that allows exploitation of incorrectly configured access control security levels. The issue allows unauthorized access. Recommendations Update...

PT-2025-44516

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R2.0.3 Description The application does not correctly enforce authorization checks for global dashboard deletion, allowing non-administrator users to delete global dashboards. This impacts other users an...

WordPress plugin Client Invoicing by Sprout Invoices 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A security vulnerabili...

PT-2025-44244

Name of the Vulnerable Software and Affected Versions WpEstate wpresidence versions through 5.3.2 Description An authorization issue exists in WpEstate wpresidence, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WpEstate wpresidence to a...

PT-2025-44259

Name of the Vulnerable Software and Affected Versions Evergreen Content Poster versions through 1.4.5 Description An authorization issue exists in Evergreen Content Poster, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Evergreen Content...

PT-2025-44360

Name of the Vulnerable Software and Affected Versions Drupal CivicTheme Design System versions prior to 1.12.0 Description An incorrect authorization issue exists in the CivicTheme Design System that allows for forceful browsing. This occurs due to insufficient access controls, potentially allowi...

PT-2025-44238

Name of the Vulnerable Software and Affected Versions solwin Blog Designer PRO versions through 3.4.8 Description A missing authorization issue exists in solwin Blog Designer PRO, allowing access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Updat...

PT-2025-44254

Name of the Vulnerable Software and Affected Versions Business Directory versions through 6.4.18 Description A missing authorization issue exists in Strategy11 Team Business Directory business-directory-plugin. This allows exploitation due to incorrectly configured access control security levels...

Red Hat build of Keycloak 授权问题漏洞

Red Hat build of Keycloak is a web application for single sign-on from Red Hat, Inc. An authorization issue vulnerability exists in the Red Hat build of Keycloak that stems from session identifier reuse and improper cleanup upon logout, which could lead to a user accidentally obtaining another...