24428 matches found
CVE-2025-68015 WordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through = 2.8.5...
CVE-2025-68015
CVE-2025-68015 — WordPress Event Tickets with Ticket Scanner is a code injection vulnerability in Vollstart Event Tickets with Ticket Scanner. Public sources in the Connected set confirm the issue affects Event Tickets with Ticket Scanner, specifically versions up to and including 2.8.3 (n/a thro...
CVE-2025-68015 WordPress Event Tickets with Ticket Scanner plugin <= 2.8.3 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through = 2.8.3...
CVE-2025-68007
Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...
CVE-2025-68007 WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability
Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...
CVE-2025-68007 WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability
Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...
CVE-2025-68007
CVE-2025-68007 corresponds to a Missing Authorization/Settings Change vulnerability in WordPress Event Espresso 4 Decaf (affected
CVE-2025-67939
CVE-2025-67939 (Tickera WordPress Tickera plugin) is a Missing Authorization / Broken Access Control vulnerability affecting Tickera up to version 3.5.6.2. The issue arises from incorrectly configured access control security levels, allowing unauthorized access. Public records from NVD/Red Hat/CV...
CVE-2025-62056
CVE-2025-62056 concerns the WordPress theme News Event (blazethemes) where an Unrestricted Upload of File with Dangerous Type exists in the News Event component. Affected versions are News Event: from n/a through <= 1.0.1, with a reported CVSS v3.1 base score of 9.9 (CRITICAL) and network atta...
CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...
CVE-2025-62056
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...
CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...
CVE-2025-67652
creationtimestamp| type| source ---|---|--- 2026-01-22 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-02 2026-01-22 23:17:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2czhzbyn2j...
RHSA-2026:0935
creationtimestamp| type| source ---|---|--- 2026-01-22 08:58:18+00:00| seen| https://gist.github.com/Darkcrai86/c86d37dd69863dff2516741f9c8f1210...
CVE-2026-23991
creationtimestamp| type| source ---|---|--- 2026-01-22 05:19:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcygrg6gy32t 2026-01-24 21:23:10+00:00| seen| https://gist.github.com/alon710/8f0590d74887d1a2e3248d957e30ec8e 2026-01-24 22:20:35+00:00| seen|...
CVE-2025-27378
creationtimestamp| type| source ---|---|--- 2026-01-22 01:25:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxzpe5az52v 2026-01-22 04:24:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcydoyxvz32n...
WordPress Plugin Event Tickets with Ticket Scanner: Code Injection Vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-4071
Name of the Vulnerable Software and Affected Versions Arraytics Eventin versions through 4.1.1 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This could potentially allow an attacker to compromise the system. Recommendations...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37878)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37878 advisory. - In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARNON!ctx in freeevent f...
WordPress plugin Event Espresso 4 Decaf has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...