PT-2026-134298

TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

PT-2026-134370

TuxCare rebuilt @babel/plugin-transform-class-properties to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

PT-2026-134350

TuxCare rebuilt @babel/plugin-syntax-class-properties to address 1 CVE. Fixed in 7.12.13-tuxcare.1...

PT-2026-134354

TuxCare rebuilt @babel/plugin-transform-async-generator-functions to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-134357

TuxCare rebuilt @babel/plugin-syntax-jsx to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CVE-2015-20125: Improper Limitation of a Pathname to a Restricted Directory

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile. Attackers can send GET requests to asposepdfexporterdownload.php with traversal sequence...

CVE-2015-20123: Improper Limitation of a Pathname to a Restricted Directory

Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile. Attackers can send GET requests to asposedocexporterdownload.php with the 'file' parameter set to...

PT-2026-133907

TuxCare rebuilt @babel/plugin-transform-modules-commonjs to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-133226

TuxCare rebuilt @babel/plugin-syntax-export-default-from to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-134364

TuxCare rebuilt @babel/plugin-syntax-jsx to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-134291

TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

PT-2026-133864

TuxCare rebuilt @babel/plugin-syntax-flow to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

VulnCheck KEV: CVE-2012-20005

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...

VulnCheck KEV: CVE-2012-20003

Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php...

VulnCheck KEV: CVE-2015-20124

Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to asposeimportexportdownload.php with traversal sequences lik...

VulnCheck KEV: CVE-2015-20125

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile. Attackers can send GET requests to asposepdfexporterdownload.php with traversal sequence...

PT-2026-133887

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

PT-2026-133924

TuxCare rebuilt @babel/plugin-transform-arrow-functions to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-133979

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

Security vulnerabilities in Oracle Management Pack for Oracle GoldenGate

A security vulnerability exists in Oracle Management Pack for Oracle GoldenGate versions 13.4.1.0.1 through 13.5.2.0.6. This vulnerability stems from an issue within the EM Plugin component and may allow unauthenticated attackers to gain access via physical communication channels, thereby taking...