108651 matches found
CVE-2025-11745 Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field through the plugin's 'adinserter' shortcode in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping on user supplied...
CVE-2025-11162
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...
CVE-2025-11162
CVE-2025-11162 affects Spectra Gutenberg Blocks – Website Builder for the Block Editor (WordPress plugin family). A stored cross-site scripting vulnerability exists via Custom CSS in all versions up to 2.19.14 (authenticated attacker with Contributor+ privileges can inject scripts executed on pag...
CVE-2025-11162 Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...
CVE-2025-11162 Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...
PT-2025-45168
Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 and below Description ClipBucket v5 is a video sharing platform. Versions 5.5.2 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database...
PT-2025-44917
Name of the Vulnerable Software and Affected Versions CE21 Suite plugin for WordPress versions prior to 2.3.2 Description The CE21 Suite plugin for WordPress is susceptible to sensitive information exposure through the log file. This allows unauthenticated attackers to extract sensitive data,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: nodetaint, buildkitd, spicedb-operator, go-md2man, bom, helm-docs, conjur-cli, restic, src-fingerprint, falcosidekick, fluent-bit-plugin-loki, terraform-docs, docker-machine-driver-linode, smarter-device-manager, k8sgateway, kubeflow, terraform-provider-azapi,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
GHSA-JWMF-CHVC-RF92 vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: nodetaint, spicedb-operator, go-md2man, velero-plugin-for-aws, dynamic-localpv-provisioner, bom, helm-docs, conjur-cli, fscrypt, minio-object-browser, vertical-pod-autoscaler, restic, kubelet-csr-approver, wave, pvc-autoresizer, atlantis, src-fingerprint,...