CVE-2025-6207

The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpietempalteimport' function in all versions up to, and including, 3.9.28. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

WordPress plugin WP Import Export Lite 代码问题漏洞

WordPress WP Import Export Lite plugin is the official WordPress recommended import and export plugin that supports batch processing of site data, including posts, pages, taxonomies, comments and user data, etc. It supports a variety of file formats such as CSV, JSON, XML and so on. WordPress WP...

WordPress plugin WP Import Export Lite 代码问题漏洞

WordPress WP Import Export Lite plugin is a free plugin for WordPress, mainly used for batch import and export website data. WordPress WP Import Export Lite plugin suffers from a missing file type validation vulnerability that can be exploited by attackers to cause arbitrary file uploads and remo...

WordPress WP Import Export Lite plugin <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Vincent Fourcade vinceMatsui in WordPress Plugin WP Import Export Lite versions = 3.9.28...

CVE-2025-8524

A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.boquanhash.dotwallet. The manipulation leads to improper export of android application...

CVE-2025-8524 Boquan DotWallet App com.boquanhash.dotwallet AndroidManifest.xml improper export of android application components

A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.boquanhash.dotwallet. The manipulation leads to improper export of android application...

CVE-2025-8524 Boquan DotWallet App com.boquanhash.dotwallet AndroidManifest.xml improper export of android application components

A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.boquanhash.dotwallet. The manipulation leads to improper export of android application...

CVE-2025-8523 RiderLike Fruit Crush-Brain App com.fruitcrush.fun AndroidManifest.xml improper export of android application components

A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.fruitcrush.fun. The manipulation leads to improper export of android...

CVE-2025-8523

CVE-2025-8523 affects RiderLike Fruit Crush-Brain App 1.0 on Android, with improper export of AndroidManifest.xml in the com.fruitcrush.fun component. This allows launching an attack on the local host and exploitation has been publicly disclosed. Vendor has not responded to disclosure. Connected ...

CVE-2025-8523 RiderLike Fruit Crush-Brain App com.fruitcrush.fun AndroidManifest.xml improper export of android application components

A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.fruitcrush.fun. The manipulation leads to improper export of android...

DotWallet App 安全漏洞

DotWallet App is a digital asset wallet application from China-based DotWallet. A security vulnerability exists in DotWallet App version 2.15.2, which stems from improper export of AndroidManifest.xml...

PT-2025-31859 · Unknown +1 · Riderlike Fruit Crush-Brain App +1

Name of the Vulnerable Software and Affected Versions: RiderLike Fruit Crush-Brain App version 1.0 Description: A vulnerability exists in RiderLike Fruit Crush-Brain App version 1.0 on Android due to improper export of android application components within the AndroidManifest.xml file of the...

PT-2025-31862 · Boquan · Boquan Dotwallet App

Name of the Vulnerable Software and Affected Versions: Boquan DotWallet App version 2.15.2 Description: A vulnerability exists in the Boquan DotWallet App that is due to improper export of android application components within the AndroidManifest.xml file of the com.boquanhash.dotwallet component...

RiderLike Fruit Crush-Brain App 安全漏洞

RiderLike Fruit Crush-Brain App is a mobile game by RiderLike. A security vulnerability exists in RiderLike Fruit Crush-Brain App version 1.0, which originates from improper export of AndroidManifest.xml...

CVE-2025-8513

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.caixin.news. The manipulation leads to improper export of android application components. Local access is...

CVE-2025-8513 Caixin News App com.caixin.news AndroidManifest.xml improper export of android application components

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.caixin.news. The manipulation leads to improper export of android application components. Local access is...

CVE-2025-8513 Caixin News App com.caixin.news AndroidManifest.xml improper export of android application components

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.caixin.news. The manipulation leads to improper export of android application components. Local access is...

CVE-2025-8513

The CVE-2025-8513 entry concerns the Caixin News App (Android) version 8.0.1, affecting the AndroidManifest.xml file within the com.caixin.news component. The vulnerability is an improper export of Android application components, requiring local access to exploit. Public disclosure is noted, and ...

CVE-2025-8512 TVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components

A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component hk.com.tvb.bigbigshop. The manipulation leads to improper export of android application...

CVE-2025-8512 TVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components

A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component hk.com.tvb.bigbigshop. The manipulation leads to improper export of android application...