quickjs:fuzz_eval: Heap-buffer-overflow in JS_CallInternal

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5597767097712640 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzeval Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type:...

WordPress wooexim plugin <= 5.0.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WOOEXIM versions = 5.0.0...

WordPress Spiritual Gifts Survey plugin <= 0.9.10 - Unauthenticated CSRF to XSS vulnerability

Unauthenticated CSRF to XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Spiritual Gifts Survey versions = 0.9.10...

WordPress Event Calendar plugin <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion vulnerability

Unauthenticated Arbitrary Calendar Deletion vulnerability discovered by Bob Matyas in WordPress Plugin Event Calendar versions = 1.0.4...

WordPress MapFig Studio plugin <= 0.2.1 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin MapFig Studio versions = 0.2.1...

WordPress profilepro plugin <= 1.3 - Subscriber+ Stored Cross Site Scripting vulnerability

Subscriber+ Stored Cross Site Scripting vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin profilepro versions = 1.3...

WordPress Badgearoo plugin <= 1.0.14 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Badgearoo versions = 1.0.14...

WordPress 360 Product Rotation plugin <= 1.5.8 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin 360 Product Rotation versions = 1.5.8...

WordPress LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin < 8.0.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin LifterLMS versions 8.0.1...

WordPress Custom Field Manager plugin <= 1.0 - Reflected XSS Vulnerability vulnerability

Reflected XSS Vulnerability vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Custom Field Manager versions = 1.0...

WordPress Advance Post Prefix plugin <= 1.1.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Advance Post Prefix versions = 1.1.1...

WordPress Bloggie Theme <= 2.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Bloggie Type Theme Vulnerable versions = 2.0.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31054 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1cb4c6b4802f Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress AffiliateImporterEb plugin <= 1.0.6 - Reflected XSS via Search vulnerability

Reflected XSS via Search vulnerability discovered by Bob Matyas in WordPress Plugin AffiliateImporterEb versions = 1.0.6...

WordPress AffiliateImporterEb plugin <= 1.0.6 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin AffiliateImporterEb versions = 1.0.6...

WordPress ClipArt plugin <= 0.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin ClipArt versions = 0.2...

WordPress Clasify Classified Listing plugin <= 1.0.7 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Clasify Classified Listing versions = 1.0.7...

WordPress WP DeskLite plugin <= 1.0.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WP DeskLite versions = 1.0.0...

WordPress tarteaucitron.js for WordPress plugin < 0.3.0 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin tarteaucitron.js for WordPress versions 0.3.0...

wireshark:fuzzshark_udp_port-dns: Heap-buffer-overflow in make_local_part_domain

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6395620455940096 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkudpport-dns Job Type: aflasanwireshark Platform Id: linux Crash Type:...

WordPress EventON plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Nguyễn Trung Kiên in WordPress Plugin EventON versions = 4.9.6...