20883 matches found
PT-2026-1304
Name of the Vulnerable Software and Affected Versions LoginWP - Pro versions through 4.0.8.5 Description A missing authorization issue exists in LoginWP - Pro, allowing access to functionality that is not properly constrained by Access Control Lists ACLs. This could allow unauthorized access to...
PT-2026-1263
Name of the Vulnerable Software and Affected Versions WPvibes AnyWhere Elementor Pro versions through 2.29 Description An authorization issue exists in WPvibes AnyWhere Elementor Pro, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update WPvibe...
WordPress plugin AnyWhere Elementor Pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-53594
A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinde...
CVE-2025-53594
CVE-2025-53594 is a path-traversal vulnerability affecting QNAP products. A local attacker who has a user account can exploit the issue to read contents of unexpected files or system data. The vulnerability is reported across Qfinder Pro Mac, Qsync for Mac, and QVPN Device Client for Mac, with fi...
CVE-2025-53594 Qfinder Pro, Qsync, QVPN
A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinde...
CVE-2025-53594 Qfinder Pro, Qsync, QVPN
A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinde...
QNAP Systems多款产品 安全漏洞
QNAP Systems Qsync and others are products of China Weilian Technology QNAP Systems.QNAP Systems Qsync is a file synchronization service for synchronizing files and folders between NAS and other devices.QNAP Systems Qfinder Pro Mac is a desktop assistant for macOS QNAP Systems QVPN Device Client ...
PT-2026-1094
Name of the Vulnerable Software and Affected Versions Qfinder Pro Mac versions prior to 7.13.0 Qsync for Mac versions prior to 5.1.5 QVPN Device Client for Mac versions prior to 2.2.8 Description A path traversal issue exists that could allow a local attacker with a user account to read the...
PT-2026-21475
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSP Paint Shop Pro file parser. A remote attacker can trigger an integer overflow in the read creator block function by providing a specially crafted PSP image file. This...
CVE-2025-28973
Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...
CVE-2025-28973 WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability
Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...
CVE-2025-28973
Summary of CVE-2025-28973: The vulnerability is a Path Traversal flaw in the WordPress plugin “AA-Team Pro Bulk Watermark Plugin for WordPress” (also referred to as Pro Bulk Watermark Plugin for WordPress) affecting versions up to 2.0. The root cause is insufficient sanitization of user-supplied ...
WordPress Ads Pro plugin <= 4.89 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ads Pro versions = 4.89...
WordPress Elementor Pro plugin <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Tonn in WordPress Plugin Elementor Pro versions = 3.29.0...
Tenda多款产品 信任管理问题漏洞
Tenda i24 and others are products of Tenda, a Chinese company. tenda i24 is a wireless router. tenda 4G03 is a wireless router tenda 4G05 is a wireless router. A trust management issue vulnerability exists in various Tenda products.The vulnerability stems from incorrect operation of the Shadow Fi...
PT-2025-54444
Name of the Vulnerable Software and Affected Versions AA-Team Pro Bulk Watermark Plugin for WordPress versions through 2.0 Description The AA-Team Pro Bulk Watermark Plugin for WordPress contains a path traversal flaw. The issue is due to insufficient sanitization of user-supplied input,...
WordPress Ads Pro plugin <= 4.95 - Unauthenticated SQL Injection via site_id vulnerability
Unauthenticated SQL Injection via siteid vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ads Pro versions = 4.95...
WordPress Ads Pro plugin <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id' vulnerability
Unauthenticated Time-Based SQL Injection via ‘bsaproid' vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ads Pro versions = 4.89...
