UBUNTU-CVE-2025-21534

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

UBUNTU-CVE-2025-21529

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

CVE-2025-21534

Removed by vendor...

CVE-2025-21529: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

CVE-2025-21534: Allocation of Resources Without Limits or Throttling

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +414 more potentially affected by CVE-2025-23061 via mongoose (>=6.0.1, <=6.13.5)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

4casterschemas (>=1.0.0, <=1.0.1), @3kles/3kles-coremongodb (>=2.1.5, <=2.1.6) +110 more potentially affected by CVE-2025-23061 via mongoose (>=8.0.0, <=8.9.4)

mongoose NPM version =8.0.0, =1.0.0, =2.1.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =3.13.0, =1.1.9, =2.0.0, =0.0.34, =0.0.36 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

Fortinet FortiWeb SQL injection vulnerability

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. A SQL injection vulnerability exists in...

WordPress plugin WordLift – AI-powered SEO – Schema security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-12176: Missing Authorization

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'wlconfigplugin' AJAX action in all versions up to, and including, 3.54.2. This makes it possible for unauthenticated attackers to update the plugin's settings...

PT-2025-1771

Name of the Vulnerable Software and Affected Versions WordLift – AI powered SEO – Schema plugin for WordPress versions prior to 3.54.0 Description The issue arises from a missing capability check on the 'wl config plugin' AJAX action, allowing unauthenticated attackers to update the plugin's...

CVE-2024-37452

Cross-Site Request Forgery CSRF vulnerability in MyThemeShop Schema Lite allows Cross Site Request Forgery.This issue affects Schema Lite: from n/a through 1.2.2...

CVE-2024-37452 WordPress Schema Lite theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MyThemeShop Schema Lite allows Cross Site Request Forgery.This issue affects Schema Lite: from n/a through 1.2.2...

CVE-2024-37452

CVE-2024-37452 is a CSRF vulnerability affecting WordPress Schema Lite theme versions 1.2.2 and earlier. The issue arises in MyThemeShop Schema Lite and is exploitable without authentication (attack requires user interaction per the CVSS metrics, with network attack vector and low complexity). Th...

CVE-2024-37452 WordPress Schema Lite theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MyThemeShop Schema Lite schema-lite allows Cross Site Request Forgery.This issue affects Schema Lite: from n/a through = 1.2.2...

CVE-2023-44258

Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through = 1.23.1...

CVE-2023-44258

Missing Authorization vulnerability in Schema App Schema App Structured Data allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through 1.23.1...

CVE-2023-44258 WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through = 1.23.1...

CVE-2023-44258 WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through = 1.23.1...

PT-2025-2488 · Mythemeshop · Mythemeshop Schema Lite

Name of the Vulnerable Software and Affected Versions: MyThemeShop Schema Lite versions 1.2.2 and earlier Description: A Cross-Site Request Forgery CSRF issue exists, allowing unauthorized actions to be performed on behalf of a user. This can lead to various security problems, as an attacker coul...