org.jenkins-ci.main:jenkins-test-harness (1.637), org.jenkins-ci.main:jenkins-war (1.637) +1 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.637)

org.jenkins-ci.main:jenkins-core MAVEN version 1.637 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.637 - org.jenkins-ci.main:jenkins-war 1.637 -...

org.jenkins-ci.main:jenkins-test-harness (1.640), org.jenkins-ci.main:jenkins-war (1.640) +1 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.640)

org.jenkins-ci.main:jenkins-core MAVEN version 1.640 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.640 - org.jenkins-ci.main:jenkins-war 1.640 -...

CVE-2024-13637 Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation

The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the installplugin function in all versions up to, and including, 1.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2024-13637

CVE-2024-13637 pertains to the Demo Awesome WordPress plugin. The vulnerability is in the install_plugin function, where a missing capability check allows an authenticated user with Subscriber-level access and above to install and activate arbitrary plugins. Affected versions are up to and includ...

PT-2025-14470

Name of the Vulnerable Software and Affected Versions Demo Awesome plugin for WordPress versions prior to 1.0.4 Description The issue is related to a missing capability check on the install plugin function, allowing authenticated attackers with Subscriber-level access and above to install and...

Official Tauri Plugins: Input validation error vulnerability

Official Tauri Plugins is an official Tauri plugin from Tauri Open Source. An input validation error vulnerability exists in versions of Official Tauri Plugins prior to 2.2.1, which stems from improper protocol validation and could lead to remote code execution...

CVE-2025-31824

Server-Side Request Forgery SSRF vulnerability in Wombat Plugins WP Optin Wheel wp-optin-wheel allows Server Side Request Forgery.This issue affects WP Optin Wheel: from n/a through = 1.4.7...

CVE-2025-31897 WordPress Arrow Custom Feed for Twitter plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arrow Plugins Arrow Custom Feed for Twitter arrow-twitter-feed allows Stored XSS.This issue affects Arrow Custom Feed for Twitter: from n/a through = 1.5.3...

PT-2025-14205 · Wombat Plugins · Wp Optin Wheel

Name of the Vulnerable Software and Affected Versions: Wombat Plugins WP Optin Wheel versions 1.4.7 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially force the...

CVE-2025-31824: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Wombat Plugins WP Optin Wheel wp-optin-wheel allows Server Side Request Forgery.This issue affects WP Optin Wheel: from n/a through = 1.4.7...

ch.mobi.mobitor.plugins:mobitor-plugin-bitbucket (>=3.1.305, <=3.1.313), ch.mobi.mobitor.plugins:mobitor-plugin-dwh (>=3.1.305, <=3.1.313) +81 more potentially affected by CVE-2025-29908 via io.netty.incubator:netty-incubator-codec-quic (>=0.0.14.final, <=0.0.20.final)

io.netty.incubator:netty-incubator-codec-quic MAVEN version =0.0.14.final, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2025-29908 Source advisory:...

ch.mobi.mobitor.plugins:mobitor-plugin-bitbucket (>=3.1.305, <=3.1.313), ch.mobi.mobitor.plugins:mobitor-plugin-dwh (>=3.1.305, <=3.1.313) +81 more potentially affected by CVE-2025-29908 via io.netty.incubator:netty-incubator-codec-quic (>=0.0.14.final, <=0.0.20.final)

io.netty.incubator:netty-incubator-codec-quic MAVEN version =0.0.14.final, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2025-29908 Source advisory:...

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

Threat actors are using the "mu-plugins" directory in WordPress sites to conceal malicious code with the goal of maintaining persistent remote access and redirecting site visitors to bogus sites. mu-plugins, short for must-use plugins, refers to plugins in a special directory...

PT-2025-13628

Name of the Vulnerable Software and Affected Versions TRENDnet TI-G102i versions 1.0.7.S0 through 1.0.8.S0 Description A vulnerability was found in the HTTP Request Handler component, affecting the function plugins call handle uri raw of the file /usr/sbin/lighttpd. This issue leads to a null...

CVE-2025-30820

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n/a through = 1.4.4...

CVE-2025-30820

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n/a through = 1.4.4...

WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms versions = 1.0.9...

CVE-2025-30863 WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms integration-for-contact-form-7-and-google-sheets allows Cross Site Request Forgery.This issue affects Integration for Google Sheets and Contact Form 7,...

CVE-2025-30820

CVE-2025-30820 (WishSuite) : WordPress WishSuite vulnerability exists due to Improper Control of Filename for Include/Require in PHP (PHP Local File Inclusion). The Wordfence Vulnerability details show this affects WishSuite versions up to 1.4.4 and requires authentication with at least Contribut...

CVE-2025-30820 WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n/a through = 1.4.4...