CVE-2025-60084 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

CVE-2025-60080 WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

CVE-2025-60083

CVE-2025-60083 affects the WordPress plugin “PDF Invoice Builder for WooCommerce” (WordPress/WooCommerce). Connected sources confirm a deserialization of untrusted data vulnerability that allows object injection in versions up to 6.3.2 (other references discuss related versions up to 6.5.0). The ...

CVE-2025-14314 WordPress PopupKit plugin <= 2.1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Roxnor PopupKit popup-builder-block allows Blind SQL Injection.This issue affects PopupKit: from n/a through = 2.1.5...

CVE-2025-14314 WordPress PopupKit plugin <= 2.1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Roxnor PopupKit popup-builder-block allows Blind SQL Injection.This issue affects PopupKit: from n/a through = 2.1.5...

PT-2025-52141

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.3.2...

PT-2025-51999

Name of the Vulnerable Software and Affected Versions Roxnor PopupKit versions through 2.1.5 Description A flaw exists in Roxnor PopupKit’s popup-builder-block component that allows for Blind SQL Injection. This is due to improper neutralization of special elements used in an SQL command. The...

PT-2025-52138

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.3.0...

WordPress plugin PDF Invoice Builder for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

PT-2025-52294

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

PT-2025-52142

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.3.1...

WordPress plugin PDF for Gravity Forms + Drag And Drop Template Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

📄 Kubio AI Page Builder 2.5.1 PHP LFI Extractor Scanner

A local file inclusion vulnerability exists in the function kubiohybridthemeloadtemplate of the Kubio AI Page Builder plugin for WordPress versions less than or equal to 2.5.1. An unauthenticated attacker may include arbitrary files via path traversal. This may lead to sensitive file disclosure a...

PT-2025-52330

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. The issue is related to the Checkbox form component, which allows attackers to inject malicious scripts. Successful...

WordPress plugin PDF for Elementor Forms + Drag And Drop Template Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

@1024pix/storybook-ember (=7.1.1), @asherng/storybook (>=0.0.18 <=0.1.14) +31 more potentially affected by CVE-2025-68429 via @storybook/builder-webpack5 (>=7.0.0 <=7.6.20)

@storybook/builder-webpack5 NPM version =7.0.0, =0.0.18, =0.0.0-dev-main.202308160724, =1.6.5, =3.50.0-next.2, =9.0.0-next.3, =0.1.3, =0.0.1, =7.4.0-alpha.2.1, =8.0.0, =1.0.0-alpha.4, =0.0.3, =0.0.1, =6.0.0-canary.234, =6.0.0-canary.234, =6.0.0-canary.318 and more Source cves: CVE-2025-68429 Sour...

@storybook/angular (>=9.0.0 <=9.1.16), @storybook/ember (>=9.0.0 <=9.1.16) +38 more potentially affected by CVE-2025-68429 via @storybook/builder-webpack5 (>=9.0.0-alpha.0 <=9.1.16)

@storybook/builder-webpack5 NPM version =9.0.0-alpha.0, =9.0.0, =9.0.0, =9.0.0-alpha.0, =9.0.0, =9.0.0-alpha.0, =9.0.0, =9.0.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =1.7.54, =1.8.115, =1.7.45, =1.8.41, =1.7.41, =1.12.21 and more Source cves: CVE-2025-68429 Source advisory:...

@abovethefray/klaviyo-adobe-commerce-app-checkout-consent-dropin (>=0.0.1 <=1.0.0), @adobe-commerce/elsie (>=1.0.0 <=2.0.0-alpha-20260514091936) +44 more potentially affected by CVE-2025-68429 via @storybook/builder-webpack5 (>=8.0.0-alpha.0 <=8.6.14)

@storybook/builder-webpack5 NPM version =8.0.0-alpha.0, =0.0.1, =1.0.0, =0.2.9, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =0.11.4, =0.12.4, =0.0.1-3d99df6-20260330104634, =1.0.967, =0.1.0, =0.3.0, =0.6.5 and more Source cves: CVE-2025-68429 Source advisory:...

Insertion of Sensitive Information into Externally-Accessible File or Directory

Overview @storybook/builder-webpack5 is an A Storybook builder to dev and build with Webpack Affected versions of this package are vulnerable to Insertion of Sensitive Information into Externally-Accessible File or Directory via the storybook build command. An attacker can access sensitive...

CVE-2025-54005

Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SKT Page Builder: from n/a through = 4.9...