10872 matches found
WordPress Redirection for Contact Form 7 plugin <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization vulnerability
Unauthenticated PHP Object Injection via PHAR Deserialization vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Redirection for Contact Form 7 versions = 3.2.4...
PT-2025-33822 · Undefined · Undefined
🟠 Astro, Server-Side Request Forgery SSRF, CVE-2024-56870 Medium https://t.co/rxOf3RNWtb...
WordPress FunnelKit Automations plugin <= 3.6.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by wesley wcraft in WordPress Plugin FunnelKit Automations versions = 3.6.3...
Linux Distros Unpatched Vulnerability : CVE-2025-2137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2025-4050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures...
WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Alex in WordPress Plugin Profile Builder versions = 3.14.3...
WordPress WP Shopify plugin < 1.5.4 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin External Store for Shopify versions 1.5.4...
Malicious code in paleoclimatology-interstellarmedium-xml-astroinformatics (npm)
The package paleoclimatology-interstellarmedium-xml-astroinformatics was found to contain malicious code...
Malicious code in nova-interstellarmedium-perturbation-palynology (npm)
The package nova-interstellarmedium-perturbation-palynology was found to contain malicious code...
Malicious code in medium-post (npm)
The package medium-post was found to contain malicious code...
MAL-2025-26148 Malicious code in medium-author (npm)
The package medium-author was found to contain malicious code...
Malicious code in medium-author (npm)
The package medium-author was found to contain malicious code...
MAL-2025-26149 Malicious code in medium-post (npm)
The package medium-post was found to contain malicious code...
WordPress Add Custom Codes <= 4.80 - Arbitrary Code Execution Vulnerability
Arbitrary Code Execution Vulnerability discovered by Ryan Novotny in WordPress Plugin Add Custom Codes versions = 4.80...
WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability
PHP Object Injection Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Eventin versions = 4.0.31...
WordPress Time Sheets plugin <= 2.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Time Sheets versions = 2.1.3...
WordPress Authentication and xmlrpc log writer plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Authentication and xmlrpc log writer versions = 1.2.2...
WordPress Forms <= 2.9.0 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by astra.r3verii in WordPress Plugin Forms versions = 2.9.0...
CVE-2025-8881
Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2025-8881
Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...