WordPress plugin Bonanza – WooCommerce Free Gifts Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-7501

The Wonder Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image title and description DOM in all versions up to, and including, 14.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Finale Lite Plugin <= 2.20.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by LVT-tholv2k in WordPress Plugin Finale Lite versions = 2.20.0...

WordPress NextMove Lite plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k in WordPress Plugin NextMove Lite versions = 2.23.0...

CVE-2025-7501

The Wonder Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image title and description DOM in all versions up to, and including, 14.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-7501 Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting

The Wonder Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image title and description DOM in all versions up to, and including, 14.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-7501

CVE-2025-7501 affects Wonder Slider Lite and Wonder Slider (

WordPress plugin Wonder Slider Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-30964 · WordPress · Wonder Slider Lite

Name of the Vulnerable Software and Affected Versions: Wonder Slider Lite versions prior to 14.5 Description: The Wonder Slider Lite plugin for WordPress is susceptible to Stored Cross-Site Scripting via image title and description DOM due to insufficient input sanitization and output escaping...

Malicious code in nodemail-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a1a416c6d186e11b3cc31cc998939044fa947ec048748fa3542568d609fc485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6188 Malicious code in nodemail-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a1a416c6d186e11b3cc31cc998939044fa947ec048748fa3542568d609fc485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage

Model compression is crucial for minimizing memory storage and accelerating inference in deep learning DL models, including recent foundation models like large language models LLMs. Users can access different compressed model versions according to their resources and budget. However, while existi...

CVE-2021-4458

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2021-4458

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

WordPress plugin Modern Events Calendar Lite SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...

PT-2025-29321 · WordPress · Modern Events Calendar Lite

Name of the Vulnerable Software and Affected Versions: Modern Events Calendar Lite plugin for WordPress versions prior to 6.4.0 Description: The Modern Events Calendar Lite plugin for WordPress is susceptible to SQL Injection via the id parameter of the /wp ajax mec load single page API endpoint...

The vulnerability of the MQTT protocol implementation in the web interface of the microprogramming-based controller ABB RMC-100 and RMC-100-LITE allows a intruder to trigger a service failure.

The vulnerability of the MQTT protocol implementation in the web interface of the microprogramming-based controllers ABB RMC-100 and RMC-100-LITE lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the MQTT protocol implementation in the web interface of the microprogramming-based controller ABB RMC-100 and RMC-100-LITE allows a intruder to gain unauthorized access to protected information.

The vulnerability of the MQTT protocol web interface implementation for microprogrammable controllers ABB RMC-100 and RMC-100-LITE lies in the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the DS-Lite technology (Dual-Stack Lite) and NAT (Network Address Translation) in the Junos OS router series of MX devices, which allows a hacker to cause a service failure.

The vulnerability of the DS-Lite Dual-Stack Lite technology and NAT Network Address Translation in Junos OS routers of the MX series is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by...

CVE-2025-28967

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Steve Truman Contact Us page - Contact people LITE contact-us-page-contact-people allows SQL Injection.This issue affects Contact Us page - Contact people LITE: from n/a through = 3.7.4...