Fedora: Security Advisory (FEDORA-2025-802ec573e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-96b62e4c87)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49445

Cross-Site Request Forgery CSRF vulnerability in WP Map Plugins Interactive UK Regional Map interactive-uk-regional-map allows Cross Site Request Forgery.This issue affects Interactive UK Regional Map: from n/a through = 2.0...

CVE-2025-49449

Cross-Site Request Forgery CSRF vulnerability in WP Map Plugins Interactive Regional Map of Africa interactive-map-of-africa allows Cross Site Request Forgery.This issue affects Interactive Regional Map of Africa: from n/a through = 1.0...

CVE-2025-49309

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through = 1.1.7...

Fedora 42 : mingw-gstreamer1-plugins-bad-free (2025-96b62e4c87)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-96b62e4c87 advisory. Backport fix for CVE-2025-3887. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2025-5303

The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross Edition plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the expirydate parameter in all versions up to, and including, 1.0.11, 2.2.6 and 2.1.10...

CVE-2025-5814: Missing Authorization

The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsdplugincontrol function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to reactivate...

CVE-2025-49449

Cross-Site Request Forgery CSRF vulnerability in WP Map Plugins Interactive Regional Map of Africa interactive-map-of-africa allows Cross Site Request Forgery.This issue affects Interactive Regional Map of Africa: from n/a through = 1.0...

CVE-2025-49445

Cross-Site Request Forgery CSRF vulnerability in WP Map Plugins Interactive UK Regional Map interactive-uk-regional-map allows Cross Site Request Forgery.This issue affects Interactive UK Regional Map: from n/a through = 2.0...

CVE-2025-49441

Missing Authorization vulnerability in WP Map Plugins Interactive Regional Map of Florida interactive-map-of-florida allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Interactive Regional Map of Florida: from n/a through = 1.0...

CVE-2025-49441

CVE-2025-49441 refers to a Missing Authorization vulnerability in the WordPress plugin “Interactive Regional Map of Florida.” The connected documents confirm: affected software is Interactive Regional Map of Florida (plugin), with version range up to 1.0; the issue is an access-control/configurat...

CVE-2025-49445

CVE-2025-49445 is a CSRF vulnerability in the WordPress plugin set for Interactive UK Regional Map. The advisory indicates the flaw affects versions up to 2.0; no root-cause, affected components, exploit details, or patch/remediation is provided in the initial or connected documents. The connecte...

CVE-2025-49449

CVE-2025-49449 describes a CSRF vulnerability in the Interactive Regional Map of Africa WordPress plugin (Interactive Regional Map of Africa / interactive-map-of-africa). The CVE scope indicates the affected product is the WordPress plugin and the issue is a CSRF flaw that could enable Cross-Site...

PT-2025-24264 · WordPress · Wp Map Plugins Interactive Regional Map Of Florida

Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive Regional Map of Florida versions 1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

PT-2025-24269 · WordPress · Wp Map Plugins Interactive Regional Map Of Africa

Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive Regional Map of Africa versions 1.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Interactive Regional Map of Africa, allowing unauthorized actions to be performed on behalf of a user...

PT-2025-24267 · WordPress · Wp Map Plugins Interactive Uk Regional Map

Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive UK Regional Map versions n/a through 2.0 Description: A Cross-Site Request Forgery CSRF issue affects the Interactive UK Regional Map, allowing unauthorized actions to be performed on behalf of a user without their...

CVE-2025-49449: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Map Plugins Interactive Regional Map of Africa interactive-map-of-africa allows Cross Site Request Forgery.This issue affects Interactive Regional Map of Africa: from n/a through = 1.0...

CVE-2025-49445: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Map Plugins Interactive UK Regional Map interactive-uk-regional-map allows Cross Site Request Forgery.This issue affects Interactive UK Regional Map: from n/a through = 2.0...

CVE-2025-49441: Missing Authorization

Missing Authorization vulnerability in WP Map Plugins Interactive Regional Map of Florida interactive-map-of-florida allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Interactive Regional Map of Florida: from n/a through = 1.0...