5 matches found
CVE-2025-13667 WP Recipe Manager <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Skill Level' Input Field
The WP Recipe Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Skill Level' input field in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated...
CVE-2025-13667
CVE-2025-13667 affects WP Recipe Manager for WordPress (
The vulnerability of the SmartFabric OS10 network operating system, related to the failure to sanitize input data at the control level, allows a perpetrator to execute arbitrary code.
The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to sanitize input data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-8747 Email Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Email Obfuscate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email-obfuscate' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
RobTop Games Geometry Dash 安全漏洞
RobTop Games Geometry Dash is a parkour game by RobTop Games. A security vulnerability exists in RobTop Games Geometry Dash version v2.113, which originates from a vulnerability that allows an attacker to execute arbitrary code by entering the Geometry Dash level...