Lucene search
+L

8355 matches found

CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•17 views

WordPress plugin WP Dummy Content Generator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.5AI score0.00396EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•6 views

CVE-2025-49312: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeRevolution Echo RSS Feed Post Generator Plugin for WordPress rss-feed-post-generator-echo allows Reflected XSS.This issue affects Echo RSS Feed Post Generator Plugin for WordPress: from n/a...

7.1CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/06/16 10:29 a.m.•22 views

WordPress WP Dummy Content Generator plugin <= 3.4.6 - Arbitrary User Deletion vulnerability

Arbitrary User Deletion vulnerability discovered by Mika in WordPress Plugin WP Dummy Content Generator versions = 3.4.6...

6.5CVSS6.8AI score0.00396EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/06/16 12:00 a.m.•25 views

Mojolicious::Plugin::CaptchaPNG 安全漏洞

Mojolicious::Plugin::CaptchaPNG is a captcha plugin from the metaCPAN Foundation. A security vulnerability exists in Mojolicious::Plugin::CaptchaPNG version 1.05, which stems from the use of a weak random number source to generate CAPTCHAs...

9.1CVSS6.7AI score0.0042EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/14 12:00 a.m.•7 views

CVE-2025-4592: Cross-Site Request Forgery (CSRF)

The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update...

4.3CVSS5.5AI score0.00138EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2025/06/13 6:33 p.m.•20 views

Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002333 fixes several issues. The following security issues were fixed: CVE-2025-21680: pktgen: Avoid out-of-bounds access in getimixentries bsc1236701. CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync bsc1239096...

8.5CVSS8AI score0.00275EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•20 views

WordPress plugin REST API | Custom API Generator For Cross Platform And Import Export In WP 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin REST API | Custom API Generator For Cross Platform And Impo...

9.8CVSS8.2AI score0.00631EPSS
SaveExploits1References4
Packet Storm News
Packet Storm News
•added 2025/06/13 12:00 a.m.•31 views

Custom API Generator for Cross Platform and Import Export in WP 2.0.3 Privilege Escalation

WordPress REST API | Custom API Generator For Cross Platform And Import Export In WP plugin versions 1.0.0 through 2.0.3 are susceptible to a privilege escalation vulnerability due to a missing capability check on the processhandler...

9.8CVSS8.6AI score0.00631EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•7 views

CVE-2025-5288: Missing Authorization

The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the processhandler function in versions 1.0.0 to 2.0.3. This makes it possible for unauthenticated attackers to POST an...

9.8CVSS5.9AI score0.00631EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/12 12:00 a.m.•12 views

PT-2025-33799

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's ath11k module related to the handling of SRNG Scatter-Gather Random Number Generator lists. Specifically, the initialized flag for these lists is no...

8.8CVSS6.1AI score0.00241EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2025/06/10 1:34 p.m.•11 views

Security update for kernel-livepatch-MICRO-6-0_Update_5

This update for kernel-livepatch-MICRO-6-0Update5 fixes the following issues: CVE-2025-21680: pktgen: avoid out-of-bounds access in getimixentries bsc1236701 CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync bsc1239096 CVE-2024-57996: netsched: schsfq: don'...

8.5CVSS7.4AI score0.00275EPSS
SaveExploits0References12
osv_suse
osv_suse
•added 2025/06/10 1:34 p.m.•9 views

SUSE-SU-2025:20399-1 Security update for kernel-livepatch-MICRO-6-0_Update_5

This update for kernel-livepatch-MICRO-6-0Update5 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in getimixentries bsc1236701 - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync bsc1239096 - CVE-2024-57996: netsched: schsfq...

7.8CVSS6.8AI score0.00275EPSS
SaveExploits0References7
osv_suse
osv_suse
•added 2025/06/10 11:23 a.m.•17 views

SUSE-SU-2025:20384-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

This update for kernel-livepatch-MICRO-6-0-RTUpdate3 fixes the following issues: - CVE-2024-49855: nbd: fix race between timeout and normal completion bsc1232900 - CVE-2025-21680: pktgen: avoid out-of-bounds access in getimixentries bsc1236701 - CVE-2024-58013: Bluetooth: MGMT: Fix...

9.8CVSS6.8AI score0.00463EPSS
SaveExploits0References9
SUSE Linux
SUSE Linux
•added 2025/06/09 3:33 p.m.•7 views

Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001023 fixes several issues. The following security issues were fixed: CVE-2025-21680: pktgen: Avoid out-of-bounds access in getimixentries bsc1236701. CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync bsc1239096...

8.5CVSS7.7AI score0.00275EPSS
SaveExploits0References12
attackerkb
attackerkb
•added 2025/06/06 1:15 p.m.•10 views

CVE-2025-30934

Missing Authorization vulnerability in OLIVESYSTEM 診断ジェネレータ作成プラグイン os-diagnosis-generator allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 診断ジェネレータ作成プラグイン: from n/a through = 1.4.16...

5.3CVSS5.9AI score0.00301EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•8 views

CVE-2025-30934: Missing Authorization

Missing Authorization vulnerability in OLIVESYSTEM 診断ジェネレータ作成プラグイン os-diagnosis-generator allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 診断ジェネレータ作成プラグイン: from n/a through = 1.4.16...

5.3CVSS5.8AI score0.00301EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•14 views

WordPress plugin Crawlomatic Multisite Scraper Post Generator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS4.9AI score0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•19 views

WordPress plugin Crawlomatic Multisite Scraper Post Generator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

5.3CVSS5.4AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•15 views

WordPress plugin 診断ジェネレータ作成プラグイン 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS5.5AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•11 views

CVE-2025-49294: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Retrieve Embedded Sensitive Data.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through =...

5.3CVSS5.8AI score0.00359EPSS
SaveExploits0References1
Rows per page
Query Builder