CVE-2025-58805 WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...

CVE-2025-58805 WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...

WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Popping Sidebars and Widgets Light versions = 1.27...

WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Que Thanh Tuan Blue Rock in WordPress Plugin Widgetize Pages Light versions = 3.0...

WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Popping Sidebars and Widgets Light versions = 1.27...

PT-2025-36144

Name of the Vulnerable Software and Affected Versions: OTWthemes Widgetize Pages Light versions through 3.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation, which results in a Stored Cross-Site Scripting XSS issue. Recommendations: Update OTWtheme...

WordPress plugin Widgetize Pages Light 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin Popping Sidebars and Widgets Light 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates from an uncleared buffer null in the iio/light/as73211 module...

PT-2025-36192

Name of the Vulnerable Software and Affected Versions: OTWthemes Popping Sidebars and Widgets Light versions through 1.27 Description: A Cross-Site Request Forgery CSRF vulnerability exists in OTWthemes Popping Sidebars and Widgets Light, which also allows Reflected Cross-Site Scripting XSS...

iio: light: opt3001: fix deadlock due to concurrent flag access

...

Cherry pie, Douglas firs and the last trip of the summer

Welcome to this week's edition of the Threat Source newsletter. Diane, 2:01 p.m., August 21st. I've just returned from a remarkable journey through Seattle and the misty roads of the Olympic Peninsula. If you ever find yourself driving beneath those towering Douglas firs or dragged by your partne...

CVE-2025-9041

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

Malicious code in homebridge-433mhz-light (npm)

The package homebridge-433mhz-light was found to contain malicious code...

MAL-2025-22512 Malicious code in homebridge-433mhz-light (npm)

The package homebridge-433mhz-light was found to contain malicious code...

Malicious code in deals-light-ui (npm)

The package deals-light-ui was found to contain malicious code...

Malicious code in @light-widgets/legacy (npm)

The package @light-widgets/legacy was found to contain malicious code...

MAL-2025-18123 Malicious code in deals-light-ui (npm)

The package deals-light-ui was found to contain malicious code...

MAL-2025-8431 Malicious code in @light-widgets/legacy (npm)

The package @light-widgets/legacy was found to contain malicious code...

CVE-2025-24323

Improper access control in some firmware package and LED mode toggle tool for some IntelR PCIe Switch software before version MR41.0b1 may allow a privileged user to potentially enable escalation of privilege via local access...