WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by thiennv in WordPress Plugin Rich Text Editor versions = 1.0.1...

CVE-2025-3067

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. Chromium security severity: Medium...

CVE-2025-3067

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. Chromium security severity: Medium...

CVE-2025-3069

Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-3070

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-3070

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-3070

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-3067

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. Chromium security severity: Medium...

CVE-2025-3069

Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-3069

Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

PT-2025-14465 · Undefined · Undefined

Threat Alert: Microsoft Discovers GRUB2, U-Boot, and Barebox Bootloader Flaws with Copilot CVE-2025-26726 CVE-2025-0677 CVE-2025-0678 Severity: 🟡 Medium Maturity: 💢 Emerging Learn more: https://t.co/CXdfA6USas CyberSecurity ThreatIntel InfoSec...

WordPress Tiger Theme <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Tiger Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31027 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0311e02b1ff6 Credits Mika Required privilege Unauthenticated Publish...

WordPress Tiger Theme <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Tiger Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31407 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 7418cf31bc7a Credits Mika Required privilege Subscriber Published 2...

WordPress Tainá Theme <= 0.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Tainá Type Theme Vulnerable versions = 0.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-26919 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID a778dbe8c9a1 Credits stealthcopter Required privilege Subscriber...

WordPress Glossy Blog Theme <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Glossy Blog Type Theme Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-26934 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b4d593ddb83f Credits stealthcopter Required privilege...

WordPress Gravel Theme <= 1.6 is vulnerable to Cross Site Scripting (XSS)

Software Gravel Type Theme Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31418 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8d65d0e5dbda Credits Mika Required privilege Unauthenticated...

WordPress Home Services Theme <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Home Services Type Theme Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-26930 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ec753abbf944 Credits stealthcopter Required privilege...

WordPress Simplish Theme <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Simplish Type Theme Vulnerable versions = 2.6.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-22281 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 4b930d5ca50f Credits stealthcopter Required privilege Subscribe...

WordPress Demo Awesome plugin <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Activation vulnerability discovered by Krzysztof Zając in WordPress Plugin Demo Awesome versions = 1.0.3...

WordPress Gift Certificate Creator plugin <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter vulnerability

Reflected Cross-Site Scripting via receipaddress Parameter vulnerability discovered by johska in WordPress Plugin Gift Certificate Creator versions = 1.1.0...