295296 matches found
CVE-2016-20103
The Cherry Plugin for WordPress (versions before 1.2.7 ) is vulnerable to a path traversal vulnerability. This flaw allows unauthenticated attackers to download arbitrary files by sending GET requests to /admin/import-export/download-content.php using the file parameter. Because the script passes...
EUVD-2016-10918
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...
EUVD-2015-9431
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile. Attackers can send GET requests to asposepdfexporterdownload.php with traversal sequence...
EUVD-2012-6613
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
CVE-2012-20005 SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
EUVD-2012-6612
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to...
CVE-2012-20004 K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff Parameter
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to...
EUVD-2012-6611
Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php...
CVE-2012-20004 K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff Parameter
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to...
CVE-2012-20004
The K-news plugin for WordPress (versions prior to 1.1.1 ) is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the failure to sanitize input supplied through the 'ff' parameter . Unauthenticated attackers can craft GET requests to /wp-content/plugins/knews/wysiwyg/font...
CLSA-2026-1792525291 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CLSA-2026-1792525290 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792525289 TuxCare security update for @babel/plugin-proposal-export-default-from (2 CVEs)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1792525288 TuxCare security update for @babel/plugin-proposal-export-default-from (2 CVEs)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792525287 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792525286 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CLSA-2026-1792525283 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792525280 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.18.9-tuxcare.2...