MiracleLinux 7 : xorg-x11-server-1.20.4-99.0.8.el7.AXS7 (AXSA:2025-11567:11)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11567:11 advisory. CVE-2025-9632: fix buffer overflow in XkbSetCompatMap CVE-2025-62229: fix use-after-free condition due improper error handling during notification...

CVE-2025-9632 PhpList Subber <= 1.1 - Cross-Site Request Forgery

The PhpList Subber plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the bulkactionhandler function. This makes it possible for unauthenticated attackers to trigger bulk synchronizati...