CVE-2025-23466 WordPress Site Editor Google Map plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

CVE-2025-23466 WordPress Site Editor Google Map plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

CVE-2025-23466

CVE-2025-23466 concerns the WordPress plugin Site Editor Google Map (Site Editor Google Map) and is a Reflected XSS vulnerability in the web page generation input handling. Affected range: plugin versions from n/a through 1.0.1. The NVD/Red Hat entries describe this as an improper neutralization ...

CVE-2025-1440

The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aipmapurlcallback function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the...

CVE-2025-23466: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

ALPINE-CVE-2025-27833

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...

Malicious code in @sf-intl-map/pc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a2d90c24241bf2e76297e783ea1e7b7672cae9934a46ce92fc661a72786973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30588

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

CVE-2025-30588 WordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

CVE-2025-30588

CVE-2025-30588 — WordPress Map Contact: CSRF leads to Stored XSS in Map Contact plugin (affected:

CVE-2025-30588 WordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

WordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerability

CSRF to Stored XSS Vulnerability discovered by Abdi Pranata in WordPress Plugin Map Contact versions = 3.0.4...

CVE-2025-30588: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

WordPress plugin Map Contact 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

The vulnerability of the arena_map_mem_usage() function in the kernel/bpf/arena.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the arenamapmemusage function in the kernel/bpf/arena.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-12224

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.22.0 Description The AimQL query language in aimhubio/aim uses an outdated version of the safer getattr function from RestrictedPython, which does not protect against the str.format map method. This allows an attacker to...

The vulnerability of the raid_map() function in the drivers/md/dm-raid.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the raidmap function in the drivers/md/dm-raid.c module of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nft_mapelem_deactivate() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftmapelemdeactivate function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

WordPress Site Editor Google Map plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Site Editor Google Map versions = 1.0.1...

Vulnerability of the function bt1_rom_map_copy_from(), located in the driver/mtd/maps/physmap-bt1-rom.c module. This driver provides support for accessing memory devices in Linux kernels, which can be exploited by attackers to compromise confidentiality.

The vulnerability of the bt1rommapcopyfrom function in the drivers/mtd/maps/physmap-bt1-rom.c module – the driver for accessing memory devices in Linux kernels – involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise confidentiality...