May 13, 2025—KB5058454 (Security-only update)

None None...

June 10, 2025—KB5061078 (Monthly Rollup)

None None...

CVE-2023-4471

The Order Tracking Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the startdate and enddate parameters in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

April 8, 2025—KB5055557 (Monthly Rollup)

None None...

April 8, 2025—KB5055570 (Security-only update)

None None...

KB5056457: Servicing stack update for Windows Server 2008 SP2: April 8, 2025

None None...

March 11, 2025—KB5053887 (Monthly Rollup)

None None...

March 11, 2025—KB5053627 (Security-only update)

None None...

March 11, 2025—KB5053620 (Monthly Rollup)

None None...

CVE-2025-1841

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

February 11, 2025—KB5052038 (Monthly Rollup)

None None...

January 14, 2025—KB5050063 (Monthly Rollup)

None None...

WordPress plugin FlickRocket 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin FlickRocke...

PT-2025-1848 · WordPress · Woocommerce Digital Content Delivery (Incl. Drm) – Flickrocket Plugin

Name of the Vulnerable Software and Affected Versions: WooCommerce Digital Content Delivery incl. DRM – FlickRocket plugin for WordPress versions up to, and including, 4.74 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers t...

PT-2025-1646 · WordPress · Store Credit / Gift Cards For Woocommerce

Name of the Vulnerable Software and Affected Versions: Store credit / Gift cards for woocommerce plugin for WordPress versions up to, and including, 1.0.49.46 Description: The issue is related to Reflected Cross-Site Scripting via the coupon, start date, and end date parameters due to insufficien...

KB5041576: Servicing stack update for Windows 10, version 1607 and Server 2016: August 13, 2024

None None...

PT-2024-11983 · Unknown · Sourcecodester Oretnom23 Employee'S Payroll Management System

Name of the Vulnerable Software and Affected Versions: sourcecodester oretnom23 employee's payroll management system version 1.0 Description: The issue allows attackers to execute arbitrary code via the code, title, from date, and to date inputs in the file Main.php. This is a Cross Site Scriptin...

Prison Management System 跨站脚本漏洞

Prison Management System is a prison management system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in SourceCodester Prison Management System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameters txtstartdate/txttenddat...

February 29, 2024—KB5034848 (OS Builds 22621.3235 and 22631.3235) Preview

None None...

CVE-2023-4471

The Order Tracking Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the startdate and enddate parameters in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...