3972 matches found
EUVD-2025-35347
The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgridskincontent' post meta field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-11824 Cinza Grid <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Skin Content Field
The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgridskincontent' post meta field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-11824
CVE-2025-11824 affects the WordPress plugin Cinza Grid (versions up to and including 1.2.1). It enables a stored XSS via the post meta field cgrid_skin_content, exploitable by authenticated users with Contributor+ privileges. Public details indicate the issue is addressed in version 1.2.1 (patche...
CVE-2025-11824 Cinza Grid <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Skin Content Field
The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgridskincontent' post meta field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress plugin Cinza Grid 跨站脚本漏洞
WordPress Cinza Grid plugin is a lightweight WordPress plugin based on Isotope Waterfall Layout for creating responsive grid layouts that support the presentation of posts, pages or custom content types. WordPress Cinza Grid plugin suffers from a cross-site scripting vulnerability that stems from...
PT-2025-43258
Name of the Vulnerable Software and Affected Versions G5Theme Grid Plus versions through 3.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the execution of malicious...
CVE-2025-59007: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in themesflat TF Woo Product Grid Addon For Elementor tf-woo-product-grid allows Object Injection.This issue affects TF Woo Product Grid Addon For Elementor: from n/a through = 1.0.1...
WordPress plugin Grid Plus 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-53352: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Grid Plus grid-plus allows Reflected XSS.This issue affects Grid Plus: from n/a through = 3.3...
WordPress Cinza Grid plugin <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Skin Content Field vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Skin Content Field vulnerability discovered by Nabil Irawan in WordPress Plugin Cinza Grid versions = 1.2.1...
Everyone Needs AIR: An Agnostic Incident Reporting Framework for Cybersecurity in Operational Technology
Operational technology OT networks are increasingly coupled with information technology IT, expanding the attack surface and complicating incident response. Although OT standards emphasise incident reporting and evidence preservation, they do not specify what data to capture during an incident,...
CVE-2025-11824: Improper Neutralization of Input During Web Page Generation
The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgridskincontent' post meta field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2025-43046
Name of the Vulnerable Software and Affected Versions Cinza Grid versions up to and including 1.2.1 Description The Cinza Grid plugin for WordPress is susceptible to Stored Cross-Site Scripting through the cgrid skin content post meta field. Insufficient input sanitization and output escaping all...
Power Grid Cybersecurity: Policy Analysis White Paper
The U.S. power grid underpins national security, public safety, and economic stability, but faces growing cyber risks from vulnerabilities in industrial control systems, remote access, and poor cyber hygiene. Despite its critical importance, current policy remains fragmented and reactive. This...
Astra Linux - уязвимость в libheif
libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...
EUVD-2013-2725
Malware in sbrugna...
EUVD-2021-0858
Malware in sbrugna...
EUVD-2008-1756
Malware in sbrugna...