kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof

A flaw was found in the Linux kernel's memory management subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS by crashing the system. When a task is migrated between processor groups cpusets concurrently during memory page allocation, a race condition can leave ...

CVE-2025-22352

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Blind SQL Injection.This issue affects ELEX...

CVE-2024-47352

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Stored XSS.This issue affects WP Bulk Delete: from n/a through = 1.3.1...

CVE-2024-29791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Reflected XSS.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 2.01...

CVE-2024-32542

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Organic Themes Bulk Block Converter allows Reflected XSS.This issue affects Bulk Block Converter: from n/a through 1.0.1...

CVE-2024-50504

Incorrect Privilege Assignment vulnerability in webxmedia Bulk Change Role bulk-role-change allows Privilege Escalation.This issue affects Bulk Change Role: from n/a through = 1.1...

CVE-2024-54236

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

CVE-2024-31091

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1...

PT-2025-5351 · WordPress · Woocommerce Pdf Invoices & Packing Slips

Name of the Vulnerable Software and Affected Versions: woocommerce-pdf-invoices-packing-slips versions prior to 4.0.0 Description: This issue allows unauthorized users to access any PDF document from a store if they have access to a guest document link and replace the URL variable my-account with...

bulk-release (2.15.30), zx-bulk-release (2.15.30) +1 more potentially affected by CVE-2025-24959 via zx (8.3.1)

zx NPM version 8.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on zx and may be impacted: - bulk-release 2.15.30 - zx-bulk-release 2.15.30 - zx-extra 3.0.28 Source cves: CVE-2025-24959 Source advisory: GHSA-QWP8-X4FF-5H87...

bulk-release (2.15.30), zx-bulk-release (2.15.30) +1 more potentially affected by CVE-2025-24959 via zx (8.3.1)

zx NPM version 8.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on zx and may be impacted: - bulk-release 2.15.30 - zx-bulk-release 2.15.30 - zx-extra 3.0.28 Source cves: CVE-2025-24959 Source advisory: OSV:GHSA-QWP8-X4FF-5H87...

bulk-release (2.15.30), zx-bulk-release (2.15.30) +1 more potentially affected by CVE-2025-24959 via zx (8.3.1)

zx NPM version 8.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on zx and may be impacted: - bulk-release 2.15.30 - zx-bulk-release 2.15.30 - zx-extra 3.0.28 Source cves: CVE-2025-24959 Source advisory: MEND:CVE-2025-24959...

CVE-2025-23582

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Haider Ali Bulk Categories Assign bulk-categories-assign allows Reflected XSS.This issue affects Bulk Categories Assign: from n/a through = 1.0...

CVE-2025-23582

CVE-2025-23582 describes a reflected cross-site scripting (XSS) vulnerability in the WordPress plugin Bulk Categories Assign (version up to 1.0). Public records assign a CVSS v3.1 base score of 7.1 (HIGH) with an impact on confidentiality, integrity, and availability (C/L/I/L) and an attacker‑con...

CVE-2025-23582 WordPress Bulk Categories Assign plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Haider Ali Bulk Categories Assign bulk-categories-assign allows Reflected XSS.This issue affects Bulk Categories Assign: from n/a through = 1.0...

PT-2025-4953

Name of the Vulnerable Software and Affected Versions Haider Ali Bulk Categories Assign versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

WordPress plugin Bulk Categories Assign has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2025-24605: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a through = 1.0.8.5...

CVE-2025-23582: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Haider Ali Bulk Categories Assign bulk-categories-assign allows Reflected XSS.This issue affects Bulk Categories Assign: from n/a through = 1.0...

WordPress Bulk Me Now plugin <= 2.0 - Message Deletion via CSRF vulnerability

Message Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Bulk Me Now! versions = 2.0...