9 matches found
CVE-2025-49983
WPThumb for WordPress is affected by CVE-2025-49983: a Server-Side Request Forgery (SSRF) vulnerability in WPThumb versions 0.10 and earlier. The vulnerability causes SSRF, with a CVSS v3.1 base score of 4.9 (Medium) and network access requiring low privileges with no user interaction. Exploitati...
CVE-2025-36576
Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery CSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2022-47873
Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...
CVE-2025-24701 WordPress Chained Quiz Plugin <= 1.3.2.9 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Kiboko Labs Chained Quiz allows Server Side Request Forgery. This issue affects Chained Quiz: from n/a through 1.3.2.9...
CVE-2025-22346 WordPress Course Migration for LearnDash plugin 1.0.2 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 through n/a...
CVE-2025-22346
CVE-2025-22346: WordPress Course Migration for LearnDash plugin (versions 1.0.2 through n/a) suffers Server-Side Request Forgery (SSRF). The vulnerability is authenticated (Subscriber+) and is documented in multiple feeds (NVD/RedHat/CVELIST). The CVSS v3.1 base score is 6.4 (Network, Low/Low/No ...
CVE-2022-47873
Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...
SUSE-SU-2016:1275-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled. They can be re-enabled by exporting the following environment variable...
SUSE-SU-2016:1276-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - Security update Remote Code Execution / Local File read bsc978061 CVE-2016-3714, CVE-2016-3715, CVE-2016-3717, CVE-2016-3718 - CVE-2016-3714: Insufficient shell characters filtering leads to potentially remote code execution -...