CVE-2025-1780

The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bpdeletepage function in all versions up to, and including, 3.4.25. This makes it possible for authenticated...

EventPrime < 3.2.0 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. POC 1 - Visit any of the following pages created by the plugin: - Event Organize...

PT-2023-2263 · Jenkins · Jenkins Update-Center2 +1

Name of the Vulnerable Software and Affected Versions: Jenkins update-center2 versions 3.13 through 3.14 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This occurs because the required Jenkins core version on plugin download index pages is rendered without...