CVE-2025-32251: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-3191: Improper Neutralization of Input During Web Page Generation

All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting XSS via the Embedded button which will then result in saving the payload in the tag...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

CVE-2025-31558: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Greg TailPress tailpress allows Retrieve Embedded Sensitive Data.This issue affects TailPress: from n/a through = 0.4.4...

CVE-2025-31842: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Retrieve Embedded Sensitive Data.This issue affects Viral Loops WP Integration: from n/a through = 3.4.0...

CVE-2025-31788: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug all-in-one-performance-accelerator allows Retrieve Embedded Sensitive Data.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress &...

CVE-2025-31832: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beee ACF City Selector acf-city-selector allows Retrieve Embedded Sensitive Data.This issue affects ACF City Selector: from n/a through = 1.17.0...

WordPress plugin ACF City Selector has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-31001: Debug Messages Revealing Unnecessary Information

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

CVE-2025-31550: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in thom4 WP-LESS wp-less allows Retrieve Embedded Sensitive Data.This issue affects WP-LESS: from n/a through = 1.9.6...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

org.infinispan.server:infinispan-server-feature-pack (8.0.2.final), org.infinispan.server:infinispan-server-infinispan (8.0.2.final) +4 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (8.0.2.final)

org.infinispan:infinispan-query MAVEN version 8.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.0.2.final -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (3.20.1), org.infinispan:infinispan-distribution (13.0.14.final) +13 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (13.0.14.final)

org.infinispan:infinispan-query MAVEN version 13.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter 3.20.1 -...

org.infinispan.server:infinispan-server-feature-pack (8.0.0.cr1), org.infinispan.server:infinispan-server-infinispan (8.0.0.cr1) +4 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (8.0.0.cr1)

org.infinispan:infinispan-query MAVEN version 8.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.0.0.cr1 -...

org.infinispan:infinispan-as-embedded-modules (7.0.0.alpha5), org.infinispan:integrationtests-security-manager (7.0.0.alpha5) potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (7.0.0.alpha5)

org.infinispan:infinispan-query MAVEN version 7.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.0.0.alpha5 -...

com.google.appengine:jetty12-assembly (>=2.0.27, <=2.0.31), org.apache.camel.karaf:camel-infinispan-embedded (4.7.0) +23 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (>=15.0.0.cr1, <=15.0.5.final)

org.infinispan:infinispan-query MAVEN version =15.0.0.cr1, =2.0.27, =4.6.0, =12.0.10, =12.0.9, =12.0.9, =12.0.9, =12.0.12, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.5.final and more Source cves: CVE-2024-6875 Source advisory: GHSA-2Q39-W2HW-2PJM...

org.apache.camel.springboot:camel-infinispan-embedded-starter (4.6.0), org.infinispan:infinispan-distribution (14.0.27.final) +14 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (14.0.27.final)

org.infinispan:infinispan-query MAVEN version 14.0.27.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter 4.6.0 -...

org.infinispan:infinispan-as-embedded-modules (7.2.0.beta1), org.infinispan:infinispan-distribution (7.2.0.beta1) +2 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (7.2.0.beta1)

org.infinispan:infinispan-query MAVEN version 7.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.2.0.beta1 -...

org.infinispan:infinispan-as-embedded-modules (7.2.0.alpha1), org.infinispan:infinispan-distribution (7.2.0.alpha1) +2 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (7.2.0.alpha1)

org.infinispan:infinispan-query MAVEN version 7.2.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.2.0.alpha1 -...

org.infinispan:infinispan-as-embedded-modules (7.1.1.final), org.infinispan:infinispan-distribution (7.1.1.final) +2 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (7.1.1.final)

org.infinispan:infinispan-query MAVEN version 7.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.1.1.final -...