CVE-2025-0861

CVE-2025-0861 affects the VR-Frases (collect & share quotes) WordPress plugin. The vulnerability is a SQL Injection in multiple parameters for all versions up to and including 3.0.1, caused by insufficient escaping and lack of proper query preparation. Unauthenticated attackers could append addit...

CVE-2024-45497

The CVE-2024-45497 entry describes a flaw in the OpenShift build process where a docker-build container mounts the node’s /var/lib/kubelet/config.json via a hostPath volume into the build pod. The config.json contains credentials for pulling private images, and the mount is not read-only, enablin...