CVE-2025-10651

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ordermail' setting in versions up to, and including, 2.11.22. This is due to insufficient sanitization on the ordermail field and a lack of escaping on output. This makes it possible for authenticate...

CVE-2025-10651

CVE-2025-10651: Welcart e-Commerce (WordPress)

EUVD-2025-11868

Malicious code in bioql PyPI...

CVE-2025-29451

An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component...

CVE-2025-29451

An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component...

CVE-2025-29451

An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component...

CVE-2025-29451

CVE-2025-29451 affects Seo Panel 4.11.0; a vulnerability in the Mail Setting component allows a remote attacker to obtain sensitive information. Core details provided across multiple sources: impact is high (CVSS v3.1: 7.6), attack vector network, low privileges required, no user interaction. Roo...

CVE-2025-29451

An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component...

PT-2025-17233 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: Seo Panel version 4.11.0 Description: An issue in Seo Panel allows a remote attacker to obtain sensitive information via the Mail Setting component. Recommendations: For Seo Panel version 4.11.0, at the moment, there is no information about a...

Command injection

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an arbitrary OS command...

CVE-2010-3829

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to...