10 matches found
EUVD-2025-13785
Malicious code in bioql PyPI...
CVE-2025-46537
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through = 3.3.1...
CVE-2025-46441
Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through = 3.3.1...
CVE-2025-46441: Path Traversal: '.../...//'
Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through = 3.3.1...
CVE-2025-47551
Cross-Site Request Forgery CSRF vulnerability in ctltwp Wiki Embed wiki-embed allows Cross Site Request Forgery.This issue affects Wiki Embed: from n/a through = 1.4.6...
CVE-2025-47551
CVE-2025-47551 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Wiki Embed plugin, affecting versions up to 1.4.6. The root cause is CSRF vulnerability leading to unauthorized settings changes. The CVSS v3.1 score is 4.3 (Medium). A fix is available in newer plugin ver...
CVE-2025-47551: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in ctltwp Wiki Embed wiki-embed allows Cross Site Request Forgery.This issue affects Wiki Embed: from n/a through = 1.4.6...
PT-2025-20164 · Unknown · Ctltwp Wiki Embed
Name of the Vulnerable Software and Affected Versions: ctltwp Wiki Embed versions 1.4.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.4.6 and...
CVE-2025-24691: Missing Authorization
Missing Authorization vulnerability in ctltwp People Lists people-lists allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects People Lists: from n/a through = 1.3.10...
