org.apache.pulsar:pulsar-io-debezium-core (2.10.4), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.4) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.4 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.5), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.5) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.5)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.5 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.6), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.6) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.6)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.6 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.0), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.0) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.0)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.0 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.1) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.2), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.2) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.2)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.2 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.3), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.3) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.3)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.3 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.4), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.4) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.4 -...

org.apache.pulsar:pulsar-io-debezium-core (>=2.4.0, <=2.11.4), org.apache.pulsar:pulsar-io-debezium-mongodb (>=2.5.0, <=2.11.4) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (>=2.4.0, <=2.11.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version =2.4.0, =2.4.0, =2.5.0, =2.9.0, =2.4.0, =2.9.0, =2.4.0, =2.8.0, =2.11.4 Source cves: CVE-2025-30677 Source advisory: SNYK:JAVA-ORGAPACHEPULSAR-9685317...

CVE-2025-30677

Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs. This vulnerability can lead to unintended...

org.apache.pulsar:pulsar-io-debezium (>=2.2.0, <=2.2.1), org.apache.pulsar:pulsar-io-debezium-core (>=2.4.0, <=2.11.4) +6 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (>=2.2.0, <=2.11.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version =2.2.0, =2.2.0, =2.4.0, =2.5.0, =2.9.0, =2.4.0, =2.9.0, =2.4.0, =2.8.0, =2.11.4 Source cves: CVE-2025-30677 Source advisory: MEND:CVE-2025-30677...

CVE-2025-32676: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Blind SQL Injection.This issue affects Verowa Connect: from n/a through = 3.0.5...

CVE-2025-32550: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickandPledge Click & Pledge Connect Plugin allows SQL Injection. This issue affects Click & Pledge Connect Plugin: from 2.24080000 through WP6.6.1...

CVE-2025-32493: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through = 1.6.2...

CVE-2025-32481: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ninotheme Nino Social Connect nino-social-connect allows Stored XSS.This issue affects Nino Social Connect: from n/a through = 2.0...

CVE-2025-30677: Insertion of Sensitive Information into Log File

Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs. This vulnerability can lead to unintended...

PT-2025-15820

Name of the Vulnerable Software and Affected Versions: Verowa Connect versions 3.0.5 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically Improper Neutralization of Special Elements used in an SQL Command, which allows Blind SQL Injection. Recommendations:...

PT-2025-15763

Name of the Vulnerable Software and Affected Versions: ninotheme Nino Social Connect versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 2.0, update to a version that includes a fix fo...

WordPress plugin Verowa Connect has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin BP Social Connect has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...