342 matches found
CVE-2025-32477
Cross-Site Request Forgery CSRF vulnerability in Jordi Salord WP-Easy Menu wp-easy-menu allows Stored XSS.This issue affects WP-Easy Menu: from n/a through = 0.41...
CVE-2025-26902 WordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issue affects Brizy Pro: from n/a through 2.6.1...
PT-2025-15740 · Unknown · Theode Language Field
Name of the Vulnerable Software and Affected Versions: theode Language Field versions n/a through 0.9 Description: A Cross-Site Request Forgery CSRF issue in theode Language Field allows for Stored XSS. Recommendations: For versions n/a through 0.9, consider disabling the Language Field...
CVE-2025-32266
Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection Replace Broken Images: from n/a through = 1.4...
CVE-2025-32134
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KaizenCoders URL Shortify url-shortify allows Stored XSS.This issue affects URL Shortify: from n/a through = 1.10.5.1...
WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin uListing versions = 2.2.0...
PT-2025-14703 · Unknown · Notfound Include-File
Name of the Vulnerable Software and Affected Versions: NotFound include-file versions n/a through 1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, in the NotFound include-file. This vulnerability...
PT-2025-14043
Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions n/a through 6.6.8.7 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...
PT-2025-14154 · Unknown · Post Custom Templates Lite
Name of the Vulnerable Software and Affected Versions: Post Custom Templates Lite versions n/a through 1.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...
PT-2025-14193 · Xtreme · Planyo
Name of the Vulnerable Software and Affected Versions: xtreeme Planyo online reservation system versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that a...
CVE-2025-30528
Cross-Site Request Forgery CSRF vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through = 1.2...
Aztech DSL5005EN Authentication Bypass
Aztech DSL5005EN authentication bypass exploit that changes the administrative password. Exploit Title: Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change Unauthenticated Date: 2025-02-26 Exploit Author: Amir Hossein Jamshidi Vendor Homepage: https://www.aztech.com Version: DSL5005EN...
Apache Tomcat Remote Code Execution
Apache Tomcat proof of concept remote code execution exploit that affects versions 11.0.0-M1 through 11.0.2, 10.1.0-M1 through 10.1.34, and 9.0.0.M1 through 9.0.98...
CVE-2025-28897
CVE-2025-28897 : CSRF to Stored XSS in the WordPress Domain Theme plugin, affecting versions up to 1.3. The issue is described as Domain Theme
CVE-2025-28894
CVE-2025-28894 : A CSRF to Stored XSS vulnerability exists in the WordPress plugin “List of Posts from each Category” (WordPress). Affected: plugin versions n/a through 2.0. Root cause: Cross-Site Request Forgery enabling stored XSS. Impact/visibility: stored XSS via CSRF could affect site visito...
CVE-2025-25165
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in richardgabriel Staff Directory Plugin: Company Directory staff-directory-pro allows Stored XSS.This issue affects Staff Directory Plugin: Company Directory: from n/a through = 4.3...
CVE-2025-23852
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robin90 First Comment Redirect first-comment-redirect allows Reflected XSS.This issue affects First Comment Redirect: from n/a through = 1.0.3...
CVE-2025-27349
CVE-2025-27349 refers to a cross-site scripting (XSS) vulnerability in the WordPress plugin Get Posts . The issue arises from improper input neutralization during web page generation, enabling a Stored XSS condition for affected versions. The vulnerability scope is described as Get Posts: from n/...