CVE-2025-67589 WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

CVE-2025-67589 WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

CVE-2025-67589

CVE-2025-67589 affects the WordPress plugin “WooCommerce PDF Invoices & Packing Slips” (woocommerce-pdf-invoices-packing-slips), with vulnerability type Missing/Broken Authorization (broken access control). Affected versions are up to 4.9.1; the issue is caused by incorrectly configured access co...

CVE-2025-67469 WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through = 1.4...

CVE-2025-67469 WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through = 1.4...

CVE-2025-67469

CVE-2025-67469 concerns a CSRF vulnerability in the WordPress plugin “PDF Thumbnail Generator” (pdf-thumbnail-generator) affecting versions up to 1.4. The issue is a Cross-Site Request Forgery vulnerability that could enable unauthorized actions by an attacker via a logged-in user context. Public...

WordPress plugin PDF Creator Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin P...

WordPress plugin WooCommerce PDF Invoices & Packing Slips 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-50107

Name of the Vulnerable Software and Affected Versions PDF-XChange Editor version 10.7.3.401 Description A flaw exists in the util.readFileIntoStream component that can lead to a Denial of Service DoS. The issue is due to a NULL pointer dereference triggered by a specially crafted input...

PT-2025-49982

Cross-Site Request Forgery CSRF vulnerability in Alex Furr PDF Creator Lite pdf-creator-lite allows Stored XSS.This issue affects PDF Creator Lite: from n/a through = 1.2...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

WordPress plugin PDF Thumbnail Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin P...

PT-2025-49963

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoices & Packing Slips versions through 4.9.1 Description The software contains a flaw related to incorrectly configured access control security levels, allowing unauthorized access. The issue impacts the WooCommerce PDF...

PT-2025-50126

Name of the Vulnerable Software and Affected Versions PDF-XChange Editor version 10.7.3.401 Description A flaw exists in PDF-XChange Editor that involves a NULL pointer dereference within the importDataObject function. This issue can be exploited by attackers to trigger a Denial of Service DoS...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange running on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor version v10.7.3.401, which originates from the presence of a null pointer dereference in the component util.readFileIntoStream, which coul...

CVE-2025-64086

PDF-XChange Editor v10.7.3.401 contains a NULL pointer dereference in the util.readFileIntoStream component that can lead to a Denial of Service. The vulnerability is documented across multiple sources (PDF-XChange and Red Hat), with no public details on a fixed version or patch in the provided d...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange running on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor version v10.7.3.401, which originates from the presence of a null pointer dereference in the function importDataObject, which could lead t...

CVE-2025-64085

PDF-XChange Editor v10.7.3.401 has a NULL pointer dereference in importDataObject() that can be triggered by crafted input to cause a Denial of Service. Documents (NVD/Red Hat/EUVD/CVE List/CNNVD) confirm DoS via this input; exploitation details are not provided in the available materials, and no...

Nextcloud Server Multiple Vulnerabilities (GHSA-24wp-p865-7j4r)

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...