CVE-2025-7507: Improper Input Validation

The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it possible for authenticated attackers, with Contributor-lev...

Linux Distros Unpatched Vulnerability : CVE-2025-8029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - firefox: thunderbird: javascript: URLs executed on object and embed tags Ubuntu Linux - Thunderbird executed javascript: URLs when us...

PT-2025-33458 · WordPress · Elink – Embed Content

Name of the Vulnerable Software and Affected Versions: elink – Embed Content plugin for WordPress versions up to and including 1.1.0 Description: The elink – Embed Content plugin for WordPress is susceptible to malicious redirection due to insufficient restriction of URLs supplied through the eli...

WordPress plugin Elink – Vulnerability in content embedding validation

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

MAL-2025-25938 Malicious code in markdown-it-embed (npm)

The package markdown-it-embed was found to contain malicious code...

MAL-2025-8963 Malicious code in @malware-test-stilt-norks-embed-cnida/test-mlw3-stilt-norks-embed-cnida (npm)

The package @malware-test-stilt-norks-embed-cnida/test-mlw3-stilt-norks-embed-cnida was found to contain malicious code...

Malicious code in markdown-it-embed (npm)

The package markdown-it-embed was found to contain malicious code...

CVE-2025-49061

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed porn-videos-embed allows Stored XSS.This issue affects Porn Videos Embed: from n/a through = 0.9.1...

CVE-2025-49061 WordPress Porn Videos Embed plugin <= 0.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed allows Stored XSS. This issue affects Porn Videos Embed: from n/a through 0.9.1...

CVE-2025-49061 WordPress Porn Videos Embed plugin <= 0.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed porn-videos-embed allows Stored XSS.This issue affects Porn Videos Embed: from n/a through = 0.9.1...

CVE-2025-49061

CVE-2025-49061 is a stored XSS vulnerability in the WordPress plugin “Porn Videos Embed” (versions n/a through 0.9.1). The issue arises from improper input neutralization during web page generation, enabling stored cross-site scripting. Affected software: Porn Videos Embed (WordPress plugin)

PT-2025-33190 · Unknown · Porn Videos Embed

Name of the Vulnerable Software and Affected Versions: Porn Videos Embed versions n/a through 0.9.1 Description: The software contains an improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. Recommendations: At the moment, there is no...

CVE-2025-49061: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed porn-videos-embed allows Stored XSS.This issue affects Porn Videos Embed: from n/a through = 0.9.1...

WordPress plugin Porn Videos Embed has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7111 more potentially affected by CVE-2025-55668 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-55668 Source advisory: OSV:GHSA-23HV-MWM6-G8JF...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.107)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48989 Source advisory: GHSA-GQP3-2CVR-X8M3...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +120 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.9)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.107)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48989 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-11799152...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.107)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48989 Source advisory: OSV:GHSA-GQP3-2CVR-X8M3...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7693 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.43)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-48989 Source advisory: OSV:GHSA-GQP3-2CVR-X8M3...