WordPress moseter theme <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme moseter versions = 1.3.1...

WordPress Js O3 Lite theme <= 1.5.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme Js O3 Lite versions = 1.5.8.2...

WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by luc Patchstack in WordPress Plugin Homey Login Register versions = 2.4.0...

WordPress Trackserver plugin <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Trackserver versions = 5.0.2...

WordPress BU Section Editing plugin <= 0.9.9 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin BU Section Editing versions = 0.9.9...

WordPress Backlink Monitoring Manager plugin <= 0.1.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Backlink Monitoring Manager versions = 0.1.3...

WordPress SEMA API plugin <= 5.27 - Reflected Cross-Site Scripting via catid Parameter vulnerability

Reflected Cross-Site Scripting via catid Parameter vulnerability discovered by vgo0 in WordPress Plugin SEMA API versions = 5.27...

WordPress ResAds plugin <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters vulnerability

Reflected Cross-Site Scripting via Multiple Parameters vulnerability discovered by vgo0 in WordPress Plugin ResAds versions = 2.0.6...

Ubuntu: Security Advisory (USN-7169-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Cost Calculator Builder PRO plugin <= 3.2.15 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Cost Calculator Builder Pro versions = 3.2.15...

WordPress AdForest theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post/Attachment Deletion vulnerability discovered by Lucio Sá in WordPress Theme AdForest versions = 5.1.7...

WordPress Power Mag theme <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Power Mag versions = 1.1.5...

WordPress Live Flight Radar Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Live Flight Radar versions = 1.0...

WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Music Player versions = 1.3...

WordPress Title Experiments Free plugin <= 9.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Title Experiments Free versions = 9.0.4...

WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin 1003 Mortgage Application versions = 1.87...

WordPress Croma Music plugin <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax vulnerability

Authenticated Subscriber+ Arbitrary Options Update in ironMusicajax vulnerability discovered by Tonn in WordPress Plugin Croma Music versions = 3.6...

WordPress Booking Calendar plugin <= 3.2.19 - Reflected Cross-Site Scripting via 'calendar_id' vulnerability

Reflected Cross-Site Scripting via 'calendarid' vulnerability discovered by vgo0 in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.19...

WordPress Passster plugin <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability

Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin Passster versions = 4.2.10...

WordPress YOGO Booking plugin <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin YOGO Booking versions = 1.6.2...