4585 matches found
CVE-2025-7507: Improper Input Validation
The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it possible for authenticated attackers, with Contributor-lev...
PT-2025-33458 · WordPress · Elink – Embed Content
Name of the Vulnerable Software and Affected Versions: elink – Embed Content plugin for WordPress versions up to and including 1.1.0 Description: The elink – Embed Content plugin for WordPress is susceptible to malicious redirection due to insufficient restriction of URLs supplied through the eli...
WordPress plugin Elink – Vulnerability in content embedding validation
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...
Linux Distros Unpatched Vulnerability : CVE-2025-8029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - firefox: thunderbird: javascript: URLs executed on object and embed tags Ubuntu Linux - Thunderbird executed javascript: URLs when us...
MAL-2025-25938 Malicious code in markdown-it-embed (npm)
The package markdown-it-embed was found to contain malicious code...
MAL-2025-8963 Malicious code in @malware-test-stilt-norks-embed-cnida/test-mlw3-stilt-norks-embed-cnida (npm)
The package @malware-test-stilt-norks-embed-cnida/test-mlw3-stilt-norks-embed-cnida was found to contain malicious code...
Malicious code in markdown-it-embed (npm)
The package markdown-it-embed was found to contain malicious code...
CVE-2025-49061
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed porn-videos-embed allows Stored XSS.This issue affects Porn Videos Embed: from n/a through = 0.9.1...
CVE-2025-49061 WordPress Porn Videos Embed plugin <= 0.9.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed allows Stored XSS. This issue affects Porn Videos Embed: from n/a through 0.9.1...
CVE-2025-49061 WordPress Porn Videos Embed plugin <= 0.9.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed porn-videos-embed allows Stored XSS.This issue affects Porn Videos Embed: from n/a through = 0.9.1...
CVE-2025-49061
CVE-2025-49061 is a stored XSS vulnerability in the WordPress plugin “Porn Videos Embed” (versions n/a through 0.9.1). The issue arises from improper input neutralization during web page generation, enabling stored cross-site scripting. Affected software: Porn Videos Embed (WordPress plugin)
PT-2025-33190 · Unknown · Porn Videos Embed
Name of the Vulnerable Software and Affected Versions: Porn Videos Embed versions n/a through 0.9.1 Description: The software contains an improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. Recommendations: At the moment, there is no...
CVE-2025-49061: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perteus Porn Videos Embed porn-videos-embed allows Stored XSS.This issue affects Porn Videos Embed: from n/a through = 0.9.1...
WordPress plugin Porn Videos Embed has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.107)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48989 Source advisory: GHSA-GQP3-2CVR-X8M3...
cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +120 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.9)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7693 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.43)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-48989 Source advisory: GHSA-GQP3-2CVR-X8M3...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.107)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48989 Source advisory: OSV:GHSA-GQP3-2CVR-X8M3...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13613 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.107)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48989 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-11799152...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7693 more potentially affected by CVE-2025-48989 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.43)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-48989 Source advisory: OSV:GHSA-GQP3-2CVR-X8M3...