16337 matches found
CVE-2025-31724
Jenkins Cadence vManager Plugin 4.0.0-282.v5096ac2db275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...
CVE-2025-31381 WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability
Missing Authorization vulnerability in shiptrack Booking Calendar and Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through 4.0.3...
WordPress Broadstreet plugin <= 1.52.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Broadstreet Ads versions = 1.52.1...
WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms versions = 1.1.3...
WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Anhchangmutrang in WordPress Plugin StaffList versions = 3.2.7...
WordPress WP Genealogy plugin <= 0.1.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Genealogy – Your Family History Website versions = 0.1.9...
WordPress SwiftXR (3D/AR/VR) Viewer plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Affan Ali - @MuslimFromPK in WordPress Plugin SwiftXR 3D/AR/VR Viewer versions = 1.0.7...
WordPress Social Share Buttons & Analytics Plugin plugin <= 4.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Abdi Pranata in WordPress Plugin Social Share Buttons & Analytics Plugin – GetSocial.io versions = 4.5...
WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin MasterStudy LMS versions = 3.5.28...
WordPress AdMail plugin <= 1.7.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin AdMail – Multilingual Back in-Stock Notifier for WooCommerce versions = 1.7.0...
WordPress Variable Inspector plugin <= 2.6.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Variable Inspector versions = 2.6.3...
WordPress Salon booking system plugin <= 10.30.18 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by NAWardRox in WordPress Plugin Salon booking system versions = 10.30.18...
WordPress TableOn plugin <= 1.0.4.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Abdi Pranata in WordPress Plugin TableOn versions = 1.0.4.4...
WordPress Spider Elements – Addons for Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf in WordPress Plugin Spider Elements versions = 1.6.5...
WordPress YaMaps for WordPress plugin <= 0.6.40 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin YaMaps for WordPress versions = 0.6.40...
CVE-2025-31405
CVE-2025-31405 is a PHP Local File Inclusion/Remote File Inclusion issue affecting the WordPress plugin Fami WooCommerce Compare . Affected versions are listed as from n/a through 1.0.5. Root cause per the CVE description: improper control of filename for include/require statements in PHP, enabli...
WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin SurveyJS versions = 1.12.20...
WordPress Doppler Forms plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Doppler Forms versions = 2.5.1...
WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Beds24 Online Booking versions = 2.0.28...