CVE-2025-7431

The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-7431: Improper Neutralization of Input During Web Page Generation

The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

PT-2025-29985 · WordPress · Wp Knowledgebase

Name of the Vulnerable Software and Affected Versions: Knowledge Base plugin for WordPress versions prior to 2.3.2 Description: The Knowledge Base plugin for WordPress is susceptible to Stored Cross-Site Scripting via the plugin slug setting due to insufficient input sanitization and output...

GPAC security vulnerabilities

GPAC is an open source multimedia framework from GPAC Open Source. A security vulnerability exists in GPAC 2.4 and earlier versions, which stems from a null pointer dereference due to incorrect manipulation of the parameter baseiniturl in the file src/mediatools/dashclient.c. The vulnerability is...

WordPress plugin Knowledge Base Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Ubuntu: Security Advisory (USN-7643-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7649-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-53028

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

MaxKB Code Injection Vulnerability

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A code injection vulnerability exists in MaxKB versions prior to 2.0.0, which stems from the fact that sandbox design rules can be bypassed, potentially leading to a...

@_lan/uni-libs (0.0.3), @acegroup/cli-templates-vue3-element-admin (1.0.0) +708 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=9.0.0, <=9.14.4)

@intlify/core-base NPM version =9.0.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =1.0.0, =0.1.87, =0.3.2 and more Source cves: CVE-2025-538...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.7) +34 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=10.0.0, <=10.0.7)

@intlify/core-base NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-53892 Source advisory: GHSA-X8QP-WQQM-57PH...

@actindo/core-ui (>=1.0.1, <=1.0.20), @dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8) +52 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=11.0.0, <=11.1.9)

@intlify/core-base NPM version =11.0.0, =1.0.1, =1.0.7, =1.1.2-app-13.7.1, =1.0.95, =0.0.1, =0.0.1, =0.0.1, =3.1.55, =11.0.0, =11.0.0, =11.0.0, =11.1.9 - @mohaq/directus-extension-tiptap 1.0.3 and more Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.7) +34 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=10.0.0, <=10.0.7)

@intlify/core-base NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

@actindo/core-ui (>=1.0.1, <=1.0.20), @dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8) +52 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=11.0.0, <=11.1.9)

@intlify/core-base NPM version =11.0.0, =1.0.1, =1.0.7, =1.1.2-app-13.7.1, =1.0.95, =0.0.1, =0.0.1, =0.0.1, =3.1.55, =11.0.0, =11.0.0, =11.0.0, =11.1.9 - @mohaq/directus-extension-tiptap 1.0.3 and more Source cves: CVE-2025-53892 Source advisory: GHSA-X8QP-WQQM-57PH...

@_lan/uni-libs (0.0.3), @acegroup/cli-templates-vue3-element-admin (1.0.0) +708 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=9.0.0, <=9.14.4)

@intlify/core-base NPM version =9.0.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =1.0.0, =0.1.87, =0.3.2 and more Source cves: CVE-2025-538...

Oracle Critical Patch Update, July 2025 Security Update Review

Oracle released its second quarterly edition of this year’s Critical Patch Update. The update received patches for 309 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families,...

@_lan/uni-libs (0.0.3), @acegroup/cli-templates-vue3-element-admin (1.0.0) +708 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=9.0.0, <=9.14.4)

@intlify/core-base NPM version =9.0.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =1.0.0, =0.1.87, =0.3.2 and more Source cves: CVE-2025-538...

@actindo/core-ui (>=1.0.1, <=1.0.20), @dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8) +52 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=11.0.0, <=11.1.9)

@intlify/core-base NPM version =11.0.0, =1.0.1, =1.0.7, =1.1.2-app-13.7.1, =1.0.95, =0.0.1, =0.0.1, =0.0.1, =3.1.55, =11.0.0, =11.0.0, =11.0.0, =11.1.9 - @mohaq/directus-extension-tiptap 1.0.3 and more Source cves: CVE-2025-53892 Source advisory: MEND:CVE-2025-53892...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.7) +34 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=10.0.0, <=10.0.7)

@intlify/core-base NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-53892 Source advisory: MEND:CVE-2025-53892...