Lucene search
K

9289 matches found

NVD
NVD
added 2025/03/31 1:15 p.m.3 views

CVE-2025-31539

Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets Pack: from n/a through = 2.0.1...

6.5CVSS0.00147EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 12:55 p.m.6 views

CVE-2025-31539 WordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Cryptocurrency Widgets Pack: from n/a through 2.0.1...

6.5CVSS7.1AI score0.00147EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/31 12:55 p.m.12 views

CVE-2025-31539 WordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets Pack: from n/a through = 2.0.1...

6.5CVSS0.00147EPSS
Exploits0References1
CVE
CVE
added 2025/03/31 12:55 p.m.60 views

CVE-2025-31539

CVE-2025-31539 concerns a Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack (WordPress). Affected: Blocksera Widgets Pack versions from n/a up to 2.0.1. Root cause: Incorrectly configured access control security levels leading to Missing Authorization. Impact: CVSS 3.1 ...

6.5CVSS7.2AI score0.00147EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.1 views

WordPress plugin Blocksera Cryptocurrency Widgets Pack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.3AI score0.00147EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/29 11:51 a.m.8 views

CVE-2025-30925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

6.5CVSS7.2AI score0.00322EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/29 11:43 a.m.6 views

CVE-2025-30845

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

7.5CVSS7.2AI score0.02308EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/28 8:28 p.m.5 views

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to security annotations on parameterized types or methods. This may cause an authorization bypass.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to security annotations on parameterized types or methods. This may cause an authorization bypass. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

5.3CVSS6.7AI score0.00033EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/28 8:23 p.m.21 views

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to An unsafe reading of environment file could potentially cause a denial of service in Netty.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to An unsafe reading of environment file could potentially cause a denial of service in Netty . This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

5.5CVSS6.7AI score0.00096EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/28 8:22 p.m.13 views

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to BCryptPasswordEncoder will incorrectly return true for passwords larger than 72 characters.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to BCryptPasswordEncoder will incorrectly return true for passwords larger than 72 characters. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

7.4CVSS6.6AI score0.00065EPSS
Exploits0Affected Software1
Snyk
Snyk
added 2025/03/27 1:46 p.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the PackLinuxElf64::unDTINIT function in plxelf.cpp. An attacker can trigger a segfault with malicious input. Remediation A fix was pushed into the master branch but not yet published. References - GitHub...

5.5CVSS6.9AI score0.00021EPSS
Exploits1References2
Patchstack
Patchstack
added 2025/03/27 11:20 a.m.3 views

WordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin The Pack Elementor addons versions = 2.1.1...

6.5CVSS6.1AI score0.00322EPSS
Exploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/03/27 11:15 a.m.3 views

CVE-2025-30925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

6.5CVSS7.2AI score0.00322EPSS
Exploits0References3
NVD
NVD
added 2025/03/27 11:15 a.m.12 views

CVE-2025-30925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

6.5CVSS0.00322EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.4 views

CVE-2025-30845

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

7.5CVSS0.02308EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/27 11:5 a.m.2 views

WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin The Pack Elementor addons versions = 2.1.1...

7.5CVSS7AI score0.02308EPSS
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/27 10:56 a.m.6 views

CVE-2025-30925 WordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

6.5CVSS7.3AI score0.00322EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 10:56 a.m.13 views

CVE-2025-30925 WordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

6.5CVSS0.00322EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 10:56 a.m.77 views

CVE-2025-30925

CVE-2025-30925 is a Stored Cross-Site Scripting vulnerability affecting The Pack Elementor addon (WordPress). The initial description confirms an XSS flaw via improper neutralization during web page generation, enabling stored XSS in the addon up to version 2.1.1. The provided metrics indicate a ...

6.5CVSS7.2AI score0.00322EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.11 views

CVE-2025-30845 WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

7.5CVSS0.02308EPSS
Exploits0References1
Rows per page
Query Builder