WordPress AI Scribe plugin <= 2.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das in WordPress Plugin AI Scribe versions = 2.5...

Polaris Intellect Core Banking SQL注入漏洞

Polaris Intellect Core Banking is an application from Polaris, Inc. A security vulnerability exists in Polaris Intellect Core Banking version 9.5, which stems from input passed via the groupType parameter in /SCGController being incorrectly processed before being used in an SQL query...

PT-2025-3125 · Polaris Ft · Polaris Ft Intellect Core Banking

Name of the Vulnerable Software and Affected Versions: Polaris FT Intellect Core Banking version 9.5 Description: An issue was discovered in the Interllect Core Search, where input passed through the groupType parameter in "/SCGController" is mishandled before being used in SQL queries, allowing...

IBM Db2 日志信息泄露漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system is executed on UNIX, Linux, IBMi, z/OS, and Windows server versions. A log information disclosure vulnerability exists in IBM Db2 version 11.5, which stems from the fact that under certain...

WordPress WP Delete Post Copies plugin <= 5.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Delete Post Copies versions = 5.5...

WordPress plugin WP Delete Post Copies 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin OZ Canonical 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Bootstrap Blocks for WP Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress OZ Canonical plugin <= 0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin OZ Canonical versions = 0.5...

WordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerability

HTML Injection vulnerability discovered by Muhammad Zidan Ali Mansur in WordPress Plugin Poll Maker versions 5.5.5...

CVE-2023-30443

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query...

WordPress Broken Link Checker | Finder plugin <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery vulnerability

Authenticated Author+ Blind Server-Side Request Forgery vulnerability discovered by Francesco Carlucci in WordPress Plugin Broken Link Checker | Finder versions = 2.5.0...

Logpoint 安全漏洞

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0. An attacker could exploit the vulnerability to inject a payload while in the Search Template Dashboard...

WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Poll Maker versions = 5.5.0...

WordPress plugin WP Ad Guru 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager version 9.5 and earlier, which stems from the presence of a protection mechanism failure vulnerability that could disclose information to a remote server...

WordPress plugin Simple Page Ordering 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists ...

WordPress AI Post Generator | AutoWriter plugin <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion vulnerability

Missing Authorization to Authenticated Contributor+ Post/Page Deletion vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin AI Post Generator | AutoWriter versions = 3.5...

CVE-2024-53960

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-52993

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...