WordPress WP Hide Categories plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Hide Categories versions = 1.0...

MAL-2025-3100 Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-26909

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows PHP Local File Inclusion.This issue affects Hide My WP Ghost: from n/a through = 5.4.01...

CVE-2025-26909

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows PHP Local File Inclusion.This issue affects Hide My WP Ghost: from n/a through = 5.4.01...

CVE-2025-26909

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in John Darrel Hide My WP Ghost allows PHP Local File Inclusion.This issue affects Hide My WP Ghost: from n/a through 5.4.01...

CVE-2025-26909

CVE-2025-26909 affects the WordPress plugin Hide My WP Ghost (versions n/a through 5.4.01). The root cause is improper filename handling in include/require logic via showFile(), enabling Local File Inclusion with potential Remote Code Execution. The connected sources consistently identify this as...

PT-2025-12374 · WordPress · Wp Ghost

Name of the Vulnerable Software and Affected Versions: Hide My WP Ghost versions n/a through 5.4.01 Description: The issue affects the Hide My WP Ghost plugin, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program. This flaw can be...

WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability

Local File Inclusion to RCE vulnerability discovered by Dimas Maulana in WordPress Plugin Hide My WP Ghost versions = 5.4.01...

CVE-2025-28910

Cross-Site Request Forgery CSRF vulnerability in Ravinder Khurana WP Hide Admin Bar wp-hide-admin-bar allows Cross Site Request Forgery.This issue affects WP Hide Admin Bar: from n/a through = 2.0...

WordPress WP Hide Admin Bar plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Hide Admin Bar versions = 2.0...

CVE-2025-28910

Cross-Site Request Forgery CSRF vulnerability in Ravinder Khurana WP Hide Admin Bar wp-hide-admin-bar allows Cross Site Request Forgery.This issue affects WP Hide Admin Bar: from n/a through = 2.0...

CVE-2025-28910 WordPress WP Hide Admin Bar plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ravinder Khurana WP Hide Admin Bar wp-hide-admin-bar allows Cross Site Request Forgery.This issue affects WP Hide Admin Bar: from n/a through = 2.0...

CVE-2025-28910

CVE-2025-28910 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Hide Admin Bar . Affected versions are listed as up to 2.0. The NVD entry and multiple sources indicate the issue is CSRF in this plugin, with a CVSSv3.1/3.1 base score of 4.3 (Medium) and the at...

WordPress plugin WP Hide Admin Bar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

The vulnerability of the user interface of Windows operating systems allows a hacker to hide files that have been decompiled from a specially created archive from users’ sight.

The vulnerability of Windows operating systems’ user interfaces is related to the improper handling of file attributes. Exploiting this vulnerability can allow attackers to hide files that have been decompressed from a specially crafted archive from users’ sight...

WordPress Hide My WP Ghost – Security & Firewall plugin <= 5.3.02 - Unauthenticated Login Page Disclosure vulnerability

Unauthenticated Login Page Disclosure vulnerability discovered by Nicholas Mun NRockhouse in WordPress Plugin Hide My WP Ghost versions = 5.3.02...

CVE-2024-13794 Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure

The WP Ghost Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possible for unauthenticated attackers to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hiding the first-in-list PCIe extended capabilities There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability i.e., a capability with an ID greater than...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure. An attacker can view restricted information by exploiting the visibility settings of the frame publishing function. Workaround This vulnerability can be mitigated by removing the site search or hiding frames...