WordPress 360 Product Rotation plugin <= 1.5.8 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin 360 Product Rotation versions = 1.5.8...

WordPress Podlove Podcast Publisher plugin < 4.2.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Podlove Podcast Publisher versions 4.2.1...

WordPress Podlove Podcast Publisher plugin < 4.1.24 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Podlove Podcast Publisher versions 4.1.24...

WordPress The GDPR Framework By Data443 plugin < 2.2.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin GDPR Framework By Data443 versions 2.2.0...

WordPress LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin < 8.0.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin LifterLMS versions 8.0.1...

WordPress VikBooking plugin < 1.7.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions 1.7.2...

WordPress Photo Gallery, Images, Slider in Rbs Image Gallery plugin < 3.2.24 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Robo Gallery versions 3.2.24...

WordPress HD Quiz plugin < 2.0.0 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin HD Quiz versions 2.0.0...

WordPress AWeber plugin < 7.3.21 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin AWeber versions 7.3.21...

WordPress LearnPress plugin < 4.2.7.5.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin LearnPress versions 4.2.7.5.1...

WordPress Custom Field Manager plugin <= 1.0 - Reflected XSS Vulnerability vulnerability

Reflected XSS Vulnerability vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Custom Field Manager versions = 1.0...

WordPress WP ERP plugin < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information vulnerability

Custom+ Unauthorized Access to Terminated Employee Information vulnerability discovered by Pedro Cuco Illex in WordPress Plugin WP ERP versions 1.13.4...

WordPress BuddyBoss platform plugin < 2.7.60 - Private Comment Exposure via IDOR vulnerability

Private Comment Exposure via IDOR vulnerability discovered by Faris Krivi in WordPress Plugin Buddyboss Platform versions 2.7.60...

WordPress Competition Form plugin <= 2.0 - Competition Deletion via CSRF vulnerability

Competition Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Competition Form versions = 2.0...

WordPress Advance Post Prefix plugin <= 1.1.1 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin Advance Post Prefix versions = 1.1.1...

WordPress Advance Post Prefix plugin <= 1.1.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Advance Post Prefix versions = 1.1.1...

WordPress Bloggie Theme <= 2.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Bloggie Type Theme Vulnerable versions = 2.0.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31054 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1cb4c6b4802f Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2025-1494)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2025-1453)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2025-1390)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...