7486 matches found
WordPress AnalyticsWP <= 2.1.2 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin AnalyticsWP versions = 2.1.2...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the processinsertquery function in the PostgresDB class. An attacker who can control the tablename used in a query, which is passed to the seqname argument without escaping, can cause SQL to be executed. Remediation The...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the admin/service/run process. An attacker can execute arbitrary code on the server by sending crafted requests. Remediation There is no fixed version for litepubl/cms. References - GitHub Issue...
WordPress Verge3D plugin <= 4.9.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin Verge3D versions = 4.9.0...
WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin JetElements For Elementor versions = 2.7.4.1...
WordPress JetTabs plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin JetTabs versions = 2.2.7...
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.9.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by luckybuddy Patchstack Alliance in WordPress Plugin Advanced Dynamic Pricing for WooCommerce versions = 4.9.3...
WordPress Name Directory plugin <= 1.30.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Name Directory versions = 1.30.0...
WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability
CSRF to Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin IP2Location Variables versions = 2.9.5...
WordPress BERTHA AI plugin <= 1.12.10.2 - Arbitrary Content Deletion Vulnerability
Arbitrary Content Deletion Vulnerability discovered by theviper17 in WordPress Plugin BERTHA AI versions = 1.12.10.2...
WordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerability
Privilege Escalation Vulnerability discovered by Le Ngoc Anh in WordPress Plugin Quentn WP versions = 1.2.8...
WordPress Forminator plugin <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit' vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'limit' vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.42.0...
WordPress Ultimate Member plugin <= 2.10.1 - Unauthenticated Blind SQL Injection vulnerability
Unauthenticated Blind SQL Injection vulnerability discovered by Muhamad Visat in WordPress Plugin Ultimate Member versions = 2.10.1...
WordPress Form Maker by 10Web plugin < 1.15.32 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Form Maker by 10Web versions 1.15.32...
WordPress Xelion Webchat plugin <= 9.1.0 - Privilege Escalation Vulnerability
Privilege Escalation Vulnerability discovered by LVT-tholv2k in WordPress Plugin Xelion Webchat versions = 9.1.0...
AZL-62660 CVE-2025-22121 affecting package kernel for versions less than 6.6.121.1-1
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4xattrinodedecrefall There's issue as follows: BUG: KASAN: use-after-free in ext4xattrinodedecrefall+0x6ff/0x790 Read of size 4 at addr ffff88807b003000 by task syz-executor.0/15172 CPU: 3 PID:...
WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Checkout Files Upload for WooCommerce versions = 2.2.0...
WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability
CSRF to XSS vulnerability discovered by johska in WordPress Plugin Internal Link Optimiser versions = 5.1.3...
WordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by anhchangmutrang in WordPress Plugin Mediavine Control Panel versions = 2.10.6...