29045 matches found
WordPress EUCookieLaw plugin <= 2.7.2 - Unauthenticated Arbitrary File Read vulnerability
Unauthenticated Arbitrary File Read vulnerability discovered by Nicolai Hellesnes nico in WordPress Plugin EUCookieLaw versions = 2.7.2...
CVE-2025-47439
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through = 5.0.22...
WordPress belingoGeo plugin <= 1.12.0 - Arbitrary File Download Vulnerability
Arbitrary File Download Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin belingoGeo versions = 1.12.0...
CVE-2025-3851
The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 1.1.0 to 2.7.13 via the show function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wit...
Cross-site Scripting (XSS)
Overview phpList/phplist3 is a popular open source newsletter manager. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized...
WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability
Arbitrary File Download Vulnerability discovered by astra.r3verii in WordPress Plugin Eventin versions = 4.0.26...
Arbitrary File Download Vulnerability in Cloud Desktop of Xinhua San Technologies Co.
Xinhua San Technology Co., Ltd. is an industry-leading leader in digital solutions. An arbitrary file download vulnerability exists in the cloud desktop of Xinhua San Technologies Limited, which can be exploited by attackers to download arbitrary files and obtain sensitive information...
CVE-2025-47439
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through = 5.0.22...
CVE-2025-47439 WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through = 5.0.22...
CVE-2025-47439
CVE-2025-47439 affects the WordPress plugin Download Monitor (versions through 5.0.22). Risk stems from improper control of filenames used in Include/Require, enabling Local File Inclusion via PHP Remote File Inclusion. CVSS v3.1 base score 7.5 (HIGH); attack vector NETWORK, access complexity HIG...
WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Download Monitor versions = 5.0.22...
WordPress plugin Download Monitor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2025-20077 · Unknown · Download Monitor
Name of the Vulnerable Software and Affected Versions: Download Monitor versions through 5.0.22 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...
CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
74cms 安全漏洞
74cms is an online recruitment system based on PHP and MySQL by 74cms. A security vulnerability exists in 74cms 3.33.0 and earlier versions, which stems from improper manipulation of the parameter url in the file /index.php/index/download/index, which could lead to path traversal attacks...
DBSyncer 安全漏洞
DBSyncer is an open source data synchronization middleware by 86dbs individual developers. A security vulnerability exists in DBSyncer version v2.0.6, which stems from improper access control of the /config/download component and could lead to the disclosure of sensitive information...
Configuration Download Detected (Low)
The system detected a change in the controller configuration that was made via the network. An attacker may use configuration changes to disrupt normal operations, to cause production losses, or to create a security threat. This plugin only works with Tenable.ot. Please visit...
Configuration Download Detected (High)
The system detected a change in the controller configuration that was made via the network. An attacker may use configuration changes to disrupt normal operations, to cause production losses, or to create a security threat. This plugin only works with Tenable.ot. Please visit...
Configuration Download Detected (Medium)
The system detected a change in the controller configuration that was made via the network. An attacker may use configuration changes to disrupt normal operations, to cause production losses, or to create a security threat. This plugin only works with Tenable.ot. Please visit...