12642 matches found
CVE-2025-8604
CVE-2025-8604 – WP Table Builder vulnerability: Stored Cross-Site Scripting via the wptb shortcode in WordPress Table Plugin versions up to and including 2.0.12, caused by insufficient input sanitization and output escaping on user-supplied attributes. The issue affects authenticated users with c...
CVE-2025-6679
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote co...
CVE-2025-6679
CVE-2025-6679 concerns the WordPress Bit Form builder plugin. Affected: Bit Form builder for WordPress, versions up to and including 2.20.4. Issue: missing file type validation enables unauthenticated arbitrary file uploads via an advanced file upload element, potentially enabling remote code exe...
PT-2025-33452 · WordPress · Wp Table Builder +1
Name of the Vulnerable Software and Affected Versions: WP Table Builder – WordPress Table Plugin versions up to and including 2.0.12 Description: The WP Table Builder – WordPress Table Plugin for WordPress is susceptible to Stored Cross-Site Scripting via the plugin’s wptb shortcode due to...
WordPress plugin Bit Form builder 代码问题漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A file upload vulnerability exists in WordPress plugin Bit Form builder 2.20.4 and earlier versions, whi...
PT-2025-33446 · WordPress · Bit Form Builder
Name of the Vulnerable Software and Affected Versions: Bit Form builder plugin for WordPress versions up to and including 2.20.4 Description: The Bit Form builder plugin for WordPress is susceptible to arbitrary file uploads due to a lack of file type validation. This allows unauthenticated...
WordPress plugin WP Table Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
Drupal Layout Builder Advanced Permissions 安全漏洞
Drupal Layout Builder Advanced Permissions is a permission control extension for the Drupal community. A security vulnerability exists in Drupal Layout Builder Advanced Permissions versions prior to 2.2.0, which stems from a lack of authorization and could lead to forced browsing...
WordPress RT Easy Builder - Advanced addons for Elementor plugin cross-site scripting vulnerability
WordPress RT Easy Builder - Advanced addons for Elementor plugin is a plugin designed for WordPress websites, mainly used to extend the design features of Elementor pages. The WordPress RT Easy Builder - Advanced addons for Elementor plugin suffers from a cross-site scripting vulnerability that...
PT-2025-33501 · Drupal · Drupal Layout Builder Advanced Permissions
Name of the Vulnerable Software and Affected Versions: Drupal Layout Builder Advanced Permissions versions 0.0.0 through 2.1.9 Description: Missing authorization allows forceful browsing in Drupal Layout Builder Advanced Permissions. Recommendations: Update to version 2.2.0 or later...
CVE-2025-55711
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Table Builder WP Table Builder wp-table-builder allows Stored XSS.This issue affects WP Table Builder: from n/a through = 2.0.12...
CVE-2025-55709
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.15.0...
Malicious code in upgrade-inflation-electron-builder-outercore (npm)
The package upgrade-inflation-electron-builder-outercore was found to contain malicious code...
Malicious code in trace-log-builder (npm)
The package trace-log-builder was found to contain malicious code...
Malicious code in webpack-karma-electron-builder-neuromorphic (npm)
The package webpack-karma-electron-builder-neuromorphic was found to contain malicious code...
Malicious code in cosmicsilence-changelog-electron-builder-auth0 (npm)
The package cosmicsilence-changelog-electron-builder-auth0 was found to contain malicious code...
Malicious code in umbriel-centauri-electron-builder-avior (npm)
The package umbriel-centauri-electron-builder-avior was found to contain malicious code...
Malicious code in angular-cli-library-builder (npm)
The package angular-cli-library-builder was found to contain malicious code...