Advisory ROSA-SA-2025-2987

software: rlottie 0.2 WASP: ROSA-CHROME unaffected versions = rlottie-0.2-4 affected versions rlottie-0.2-4 CVE-ID: CVE-2025-53074 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC.: Samsung Open Source rLottie - out-of-bounds read vulnerability allows buffers to overflow. CVE-STATUS: Vulnerability has be...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18501

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

Design/Logic Flaw

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...