Lucene search
+L

20567 matches found

BDU FSTEC
BDU FSTEC
•added 2025/07/22 12:00 a.m.•22 views

Adobe Illustrator Pointer Error DoS

The vulnerability of Adobe Illustrator’s graphic editor is related to pointer assignment errors. Exploiting this vulnerability can allow attackers to trigger a service failure using a specially created malicious file...

5.5CVSS6.4AI score0.00216EPSS
SaveExploits0References2Affected Software2
RedhatCVE
RedhatCVE
•added 2025/07/21 10:11 a.m.•18 views

CVE-2012-10019

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote...

9.8CVSS7.7AI score0.03847EPSS
SaveExploits2References1
CVE
CVE
•added 2025/07/21 7:23 a.m.•53 views

CVE-2025-4685

CVE-2025-4685 : Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor (WordPress) is vulnerable to Stored Cross‑Site Scripting via HTML data attributes in multiple widgets, affecting all versions up to and including 3.4.8. Exploitation requires authenticated access at Contributor level ...

6.4CVSS6AI score0.00258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/21 12:00 a.m.•8 views

CVE-2025-4685: Improper Neutralization of Input During Web Page Generation

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attributes of multiple widgets, in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This make...

6.4CVSS6AI score0.00258EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/21 12:00 a.m.•19 views

Microsoft Input Method Editor Resource Management Error Vulnerability

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...

7.8CVSS7.3AI score0.00351EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/07/21 12:00 a.m.•23 views

Adobe Illustrator Numerical Loss of Significance Code Execution

The vulnerability of Adobe Illustrator’s graphic editor is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.5AI score0.00266EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
•added 2025/07/21 12:00 a.m.•16 views

Microsoft Input Method Editor Buffer Overflow Vulnerability

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...

8.8CVSS7.8AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•23 views

Marshmallow Packages Laravel Nova Tiptap Editor Field Code Issues and Vulnerabilities

Marshmallow Packages Laravel Nova Tiptap Editor Field is a Marshmallow Packages open source editor software. A code issue vulnerability exists in Marshmallow Packages Laravel Nova Tiptap Editor Field versions prior to 5.7.0, which stems from insufficient authentication and validation of file uplo...

9.3CVSS6.6AI score0.0094EPSS
SaveExploits0References2
NVD
NVD
•added 2025/07/19 10:15 a.m.•20 views

CVE-2012-10019

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote...

9.8CVSS0.03847EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
•added 2025/07/19 9:23 a.m.•15 views

CVE-2012-10019 Front-end Editor < 2.3 - Arbitrary File Upload

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote...

9.8CVSS6.4AI score0.03847EPSS
SaveExploits2References5
CVE
CVE
•added 2025/07/19 9:23 a.m.•45 views

CVE-2012-10019

The CVE-2012-10019 issue affects the Front End Editor plugin for WordPress (versions before 2.3). The vulnerability arises from missing file type validation in upload.php, allowing unauthenticated users to upload arbitrary files to the server, with potential remote code execution. Affected softwa...

9.8CVSS6.4AI score0.03847EPSS
SaveExploits2References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/07/19 12:00 a.m.•17 views

PT-2025-30124

Name of the Vulnerable Software and Affected Versions Front End Editor plugin for WordPress versions prior to 2.3 Description The Front End Editor plugin for WordPress is susceptible to arbitrary file uploads due to missing file type validation via the upload.php file. This allows unauthenticated...

9.8CVSS7.5AI score0.03847EPSS
SaveExploits2References9
CNNVD
CNNVD
•added 2025/07/19 12:00 a.m.•18 views

WordPress Plugin Front End Editor Code Issues and Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS6.4AI score0.03847EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/19 12:00 a.m.•6 views

CVE-2012-10019: Unrestricted Upload of File with Dangerous Type

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote...

9.8CVSS6.4AI score0.03847EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/07/18 5:23 a.m.•32 views

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

4.3CVSS0.00276EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/07/18 5:23 a.m.•11 views

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

4.3CVSS5.9AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
•added 2025/07/18 5:23 a.m.•39 views

CVE-2025-6726

CVE-2025-6726 relates to the Block Editor Gallery Slider WordPress plugin. The Wordfence/NVD entry states a missing capability check in classic_gallery_slider_options() affects all versions up to and including 1.1.1, enabling authenticated users with Subscriber-level access or higher to modify li...

4.3CVSS5.9AI score0.00276EPSS
SaveExploits0References3
Fedora
Fedora
•added 2025/07/18 1:11 a.m.•13 views

[SECURITY] Fedora 41 Update: vim-9.1.1552-1.fc41

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

4.1CVSS6.3AI score0.00871EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/18 12:00 a.m.•6 views

CVE-2025-6726: Missing Authorization

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

4.3CVSS5.9AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/18 12:00 a.m.•21 views

PT-2025-30003 · WordPress · Block Editor Gallery Slider

Name of the Vulnerable Software and Affected Versions: Block Editor Gallery Slider plugin for WordPress versions up to and including 1.1.1 Description: The Block Editor Gallery Slider plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the...

4.3CVSS6.2AI score0.00276EPSS
SaveExploits0References6
Rows per page
Query Builder