4599 matches found
WordPress plugin Zoorum Comments 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Zoorum Comments plugin <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Zoorum Comments versions = 0.9...
PT-2025-10913
Name of the Vulnerable Software and Affected Versions: Venugopal Comment Date and Gravatar remover versions n/a through 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This is a type of attack where an attacker...
DEBIAN-CVE-2025-2123
A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function getvar of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument...
GeSHi 代码注入漏洞
GeSHi is a Generic Syntax Highlighter open source PHP generic syntax highlighter. A code injection vulnerability exists in GeSHi version 1.0.9.1 and earlier, which stems from incorrect manipulation of the parameters default-styles, keywords-1, keywords-2, keywords-3, keywords-4, and comments can...
CVE-2025-25130
Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...
CVE-2025-25130
Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...
CVE-2025-25130
CVE-2025-25130 corresponds to a Relative Path Traversal that enables unauthenticated PHP Local File Inclusion in the WordPress plugin Delete Comments By Status (affected: Delete Comments By Status, versions
CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability
Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...
CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability
Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File Inclusion. This issue affects Delete Comments By Status: from n/a through 2.1.1...
CVE-2025-25130: Relative Path Traversal
Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...
PT-2025-9448
Name of the Vulnerable Software and Affected Versions Delete Comments By Status versions n/a through 2.1.1 Description The issue is related to a Relative Path Traversal vulnerability in the Delete Comments By Status component, which allows for PHP Local File Inclusion. Recommendations For version...
CVE-2025-1513
The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Name and Comment field when commenting on photo gallery entries in all versio...
DEBIAN-CVE-2022-49054
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctlrecordpanicmsg by default in isolated guests hvpanicpage might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some...
UBUNTU-CVE-2022-49054
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctlrecordpanicmsg by default in isolated guests hvpanicpage might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some...
OESA-2025-1149 python3 security update
Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...
CVE-2024-13684
The Reset plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce validation on the resetdbpage function. This makes it possible for unauthenticated attackers to reset several tables in the database like...
Our Container Security AMA: You asked, Wiz answered
Check out the top comments and responses from our recent containers AMA...