462 matches found
PT-2025-35051
Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Elite versions through 1.2.4 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion...
CVE-2025-52287
OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability...
CVE-2025-52287
OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability...
CVE-2025-52287
OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability...
CVE-2025-54044
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...
CVE-2025-52287
OperaMasks SDK ELite Script Engine v0.5.0 contains a deserialization vulnerability. CVE-2025-52287 shows a NETWORK-exploitable flaw with HIGH impact to confidentiality, integrity, and availability (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected component: OperaMasks SDK ELite Script Engine; root ...
CVE-2025-52287
OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability...
OperaMasks SDK ELite Script Engine 安全漏洞
OperaMasks SDK ELite Script Engine is a software development kit from OperaMasks, Inc. A security vulnerability exists in OperaMasks SDK ELite Script Engine version 0.5.0, which stems from the presence of a deserialization vulnerability...
PT-2025-34476 · Unknown · Operamasks Sdk Elite Script Engine
Name of the Vulnerable Software and Affected Versions: OperaMasks SDK ELite Script Engine version 0.5.0 Description: OperaMasks SDK ELite Script Engine version 0.5.0 contains a deserialization vulnerability. Recommendations: At the moment, there is no information about a newer version that contai...
WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Le Ngoc Anh in WordPress Theme Magazine Elite versions = 1.2.4...
WordPress Magazine Elite Theme <= 1.2.4 is vulnerable to Local File Inclusion
Software Magazine Elite Type Theme Vulnerable versions = 1.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-53244 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID da2ed7dcedc4 Credits Le Ngoc Anh Required privilege Unauthenticat...
CVE-2025-54044
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...
CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...
CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player allows Reflected XSS. This issue affects Elite Video Player: from n/a through 10.0.5...
CVE-2025-54044
CVE-2025-54044 is a reflected XSS vulnerability in WordPress Elite Video Player
PT-2025-34011 · Unknown · Elite Video Player
Name of the Vulnerable Software and Affected Versions: Elite Video Player versions through 10.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Reflected Cross-site Scripting XSS. Recommendations: Update Elite Video Playe...
WordPress plugin Elite Video Player 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-26484
Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...
