26568 matches found
PT-2025-43728
Name of the Vulnerable Software and Affected Versions Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress versions up to and including 8.3.1 Description The Stripe Payment Forms plugin for WordPress is susceptible to SQL Injection due ...
WordPress plugin IndieAuth 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...
EUVD-2025-35880
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard...
CVE-2025-60563
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr...
CVE-2025-60562
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey...
CVE-2025-60557
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasyWizard...
CVE-2025-60550
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone...
CVE-2025-60571
D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS...
CVE-2025-60569
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute...
CVE-2025-12028
CVE-2025-12028 (IndieAuth WordPress plugin) : The IndieAuth plugin (versions ≤ 4.5.4) is vulnerable to Cross-Site Request Forgery due to missing nonce verification in login_form_indieauth() and the wp-login.php?action=indieauth endpoint. This enables an unauthenticated attacker to induce a logged...
CVE-2025-60564
CVE-2025-60564 concerns D-Link DIR600L family (DIR600L Ax FW116WWb01). A buffer overflow is caused by the curTime parameter in the formSetLog function due to improper input length validation. Public details in connected sources describe impact as denial of service, with no explicit mention of a p...
PT-2025-43635
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork...
CVE-2025-60556
The CVE refers to a buffer overflow in the D-Link DIR600L (and DIR600L Ax) firmware related to the curTime parameter in the formSetWizard1 function of FW116WWb01. Public sources consistently describe a vulnerability triggered by insufficient input validation on curTime, enabling a overflow condit...
CVE-2025-60554
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard...
CVE-2025-60552
CVE-2025-60552 affects the D-Link DIR600L router (DIR600L Ax FW116WWb01). A buffer overflow is triggered in the function formTcpipSetup via the input noted in the curTime parameter, due to improper input length validation. Reported impact is denial of service, with CVSSv3.1 indicating Network acc...
CVE-2025-60551
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the nextpage parameter in the function formDeviceReboot...
PT-2025-43631
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall...
WordPress CF7 Auto Responder Addon plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress CF7 Auto Responder Addon plugin, which stems from the application's lack of effective filtering and escaping of...