267929 matches found
PT-2026-134353
TuxCare rebuilt @babel/plugin-transform-async-generator-functions to address 1 CVE. Fixed in 7.23.9-tuxcare.3...
PT-2026-133225
TuxCare rebuilt @babel/plugin-syntax-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133989
TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-133993
TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133983
TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CVE-2014-125132: Improper Neutralization of Input During Web Page Generation
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with maliciou...
PT-2026-133320
TuxCare rebuilt @babel/plugin-transform-computed-properties to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CVE-2016-20103: Improper Limitation of a Pathname to a Restricted Directory
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
PT-2026-134372
TuxCare rebuilt @babel/plugin-syntax-decorators to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-133936
TuxCare rebuilt @babel/plugin-proposal-async-generator-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
VulnCheck KEV: CVE-2016-20103
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
VulnCheck KEV: CVE-2016-20101
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...
VulnCheck KEV: CVE-2012-20004
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to...
PT-2026-133947
TuxCare rebuilt @babel/plugin-transform-literals to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133862
TuxCare rebuilt @babel/plugin-syntax-flow to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-133905
TuxCare rebuilt @babel/plugin-transform-modules-commonjs to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-134292
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-118429
Name of the Vulnerable Software and Affected Versions Vite versions 8.2.0 through 8.2.3 Vite version 8.3.3 Description A flaw in the internal Wasm plugin's load hook allows the first 4 bytes of files located outside the server.fs setting to be returned to the browser. This occurs when a request...
Plex Media Server < 1.43.3.10861 Multiple Vulnerabilities
According to its self-reported version, the Plex Media Server installed on the remote host is prior to 1.43.3.10861. It is, therefore, affected by multiple vulnerabilities: - Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The...