Lucene search
+L

12459 matches found

Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•22 views

PT-2026-1009

Name of the Vulnerable Software and Affected Versions My Sticky Elements plugin for WordPress versions prior to 2.3.4 Description The My Sticky Elements plugin for WordPress is susceptible to unauthorized data loss. A missing capability check within the my sticky elements bulks function allows...

4.3CVSS5.9AI score0.00304EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2026/01/01 12:00 a.m.•17 views

WordPress plugin My Sticky Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.4AI score0.00304EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•24 views

PT-2026-27680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mt76 module related to out-of-bounds access within the mt76 connac2 mac write txwi 80211 function. A check for frame length is insufficient,...

7.1CVSS6AI score0.00126EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/31 1:07 p.m.•41 views

CVE-2025-14426

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'editrating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above t...

4.3CVSS5.1AI score0.00233EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993102 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for...

5.5CVSS6.1AI score0.00242EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•11 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993217)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993217 advisory. In the Linux kernel, the following vulnerability has been resolved: capabilities: fix undefined behavior in bit shift for CAPTOMASK Shifting signed 32-bit value by 3...

7.1CVSS6AI score0.00223EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/30 3:30 p.m.•20 views

EUVD-2025-205774

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'editrating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above t...

4.3CVSS4.7AI score0.00233EPSS
SaveExploits0References5
NVD
NVD
•added 2025/12/30 1:16 p.m.•16 views

CVE-2025-14426

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'editrating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above t...

4.3CVSS0.00233EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2025/12/30 1:16 p.m.•13 views

CVE-2023-54181

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allowptrleaks After we converted the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. Because it failed the bpf verifier, a...

5.7AI score0.00199EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/12/30 12:22 p.m.•5 views

CVE-2025-14426 Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'editrating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above t...

4.3CVSS5.8AI score0.00233EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/30 12:22 p.m.•43 views

CVE-2025-14426 Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'editrating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above t...

4.3CVSS0.00233EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/30 12:08 p.m.•30 views

CVE-2023-54181 bpf: Fix issue in verifying allow_ptr_leaks

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allowptrleaks After we converted the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. Because it failed the bpf verifier, a...

0.00199EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•8 views

CVE-2025-14426: Missing Authorization

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'editrating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above t...

4.3CVSS5.8AI score0.00233EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•18 views

WordPress plugin Strong Testimonials 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.3AI score0.00233EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•21 views

PT-2025-54173

Name of the Vulnerable Software and Affected Versions Strong Testimonials plugin for WordPress versions up to and including 3.2.18 Description The Strong Testimonials plugin for WordPress has a flaw that allows unauthorized modification of data. This is due to a missing capability check within th...

4.3CVSS6AI score0.00233EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/12/25 5:25 a.m.•20 views

CVE-2025-13773

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS6.2AI score0.03711EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/24 1:16 p.m.•14 views

CVE-2023-54137

In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix capmigration information leak Fix an information leak where an uninitialized hole in struct vfioiommutype1infocapmigration on the stack is exposed to userspace. The definition of struct...

0.00214EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2025/12/24 1:16 p.m.•9 views

CVE-2023-54137

In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix capmigration information leak Fix an information leak where an uninitialized hole in struct vfioiommutype1infocapmigration on the stack is exposed to userspace. The definition of struct...

5.8AI score0.00214EPSS
SaveExploits0References7
CVE
CVE
•added 2025/12/24 1:06 p.m.•37 views

CVE-2023-54137

Technical details about this CVE are not provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, versions, impact, and remediation.

5.8AI score0.00214EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/12/24 9:39 a.m.•21 views

CVE-2025-14155

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gettemplatecontent' function in all versions up to, and including, 4.11.53. This makes it possible for...

5.3CVSS5.8AI score0.00764EPSS
SaveExploits0References1
Rows per page
Query Builder