WordPress plugin Post Grid Master has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-24263 · WordPress · Vuong Nguyen Wp Security Master

Name of the Vulnerable Software and Affected Versions: Vuong Nguyen WP Security Master versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Vuong...

PT-2025-24181 · Unknown · Post Grid Master

Name of the Vulnerable Software and Affected Versions: Post Grid Master versions through 3.4.13 Description: The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through 3.4.13, update to a...

CVE-2025-49440: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Vuong Nguyen WP Security Master wp-security-master allows Cross Site Request Forgery.This issue affects WP Security Master: from n/a through = 1.0.2...

CVE-2025-30974: Missing Authorization

Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid Master: from n/a through = 3.4.17...

CVE-2025-5597

Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571...

CVE-2025-5598

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...

CVE-2025-5597 WF Steuerungstechnik GmbH - airleader MASTER - Authentication Bypass

Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571...

CVE-2025-5597

CVE-2025-5597 concerns WF Steuerungstechnik GmbH airleader MASTER. Affected product: airleader MASTER (version 3.00571). Root cause: improper authentication leading to an authentication bypass. Impact described across sources (NVD/Red Hat/CVE listings) as severe, with high Confidentiality, Integr...

CVE-2025-5597 WF Steuerungstechnik GmbH - airleader MASTER - Authentication Bypass

Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571...

CVE-2025-5598 WF Steuerungstechnik GmbH - airleader MASTER - Path Traversal

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...

CVE-2025-5598 WF Steuerungstechnik GmbH - airleader MASTER - Path Traversal

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...

CVE-2025-5598

CVE-2025-5598 describes a Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER, affecting version 3.0046. The underlying issue allows retrieval of embedded sensitive data due to path traversal. The CVSS 4.0 score is 9.2 (CRITICAL) with network access, low attack complexity, ...

Airleader Master security vulnerabilities

Airleader Master is a management device for managing air compressors from Airleader USA. A security vulnerability exists in Airleader Master version 3.00571 that stems from improper authentication and could lead to authentication bypass...

Airleader Master security vulnerabilities

Airleader Master is a management device for managing air compressors from Airleader USA. A security vulnerability exists in Airleader Master version 3.0046, which stems from vulnerability to a path traversal attack that could result in the retrieval of embedded sensitive data...

PT-2025-23796 · Unknown · Airleader Master

Name of the Vulnerable Software and Affected Versions: airleader MASTER version 3.00571 Description: The issue is related to an Improper Authentication vulnerability that allows Authentication Bypass. This vulnerability affects the airleader MASTER device, potentially allowing unauthorized access...

CVE-2025-5598: Path Traversal: '.../...//'

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...

CVE-2025-5597: Improper Authentication

Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in makeMiddleware, when processing a file upload request. An attacker can cause the application to crash by sending a request with a field name containing an empty string. Remediation A fix was pushed into the master...

DaaS - Change master image it fails with "ProvisioningTaskError"

Unable to update DaaS Machine Catalog - Access Machine Catalog "Change master image" it fails with "ProvisioningTaskError" ErrorMessage - HandleExplicitStorage Failed Error retrieving item from path ""...