WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin TI WooCommerce Wishlist versions = 2.9.2...

WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WordPress Events Calendar Registration & Tickets versions = 2.6.0...

WordPress WC Affiliate plugin <= 2.16 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin WC Affiliate versions = 2.16...

WordPress 6Storage Rentals plugin <= 2.20.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin 6Storage Rentals versions = 2.20.1...

WordPress STAGGS plugin <= 2.11.0 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by astra.r3verii in WordPress Plugin STAGGS versions = 2.11.0...

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.3.9 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by LVT-tholv2k in WordPress Plugin Printcart Web to Print Product Designer for WooCommerce versions = 2.3.9...

WordPress Facturante plugin <= 1.11 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by astra.r3verii in WordPress Plugin Facturante versions = 1.11...

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by LVT-tholv2k in WordPress Plugin Printcart Web to Print Product Designer for WooCommerce versions = 2.4.0...

WordPress Arconix Shortcodes plugin <= 2.1.16 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Arconix Shortcodes versions = 2.1.16...

SUSE CVE-2025-4664

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2024-58101

Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity...

CVE-2025-4730

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer...

WordPress Advanced Page Visit Counter plugin <= 8.0.6 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Furkan ÖZER in WordPress Plugin Advanced Page Visit Counter versions = 8.0.6...

WordPress The Business Theme <= 1.6.1 is vulnerable to Broken Access Control

Software The Business Type Theme Vulnerable versions = 1.6.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31630 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f1f03f03f89d Credits Tran Nguyen Bao Khanh VCI - VNPT...

WordPress Rozario Theme <= 1.4 is vulnerable to Broken Access Control

Software Rozario Type Theme Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31065 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 039f36178658 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress Acerola Theme <= 1.6.5 is vulnerable to Broken Access Control

Software Acerola Type Theme Vulnerable versions = 1.6.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31066 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 095f29f718c8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

PT-2025-21745

Name of the Vulnerable Software and Affected Versions: ECOVACS robot vacuums and base stations affected versions not specified Description: ECOVACS robot vacuums and base stations communicate over an insecure Wi-Fi network. The communication utilizes AES encryption with a deterministic key that c...

WordPress Plant - Gardening & Houseplants WordPress Theme Theme <= 1.0.0 is vulnerable to Sensitive Data Exposure

Software Plant - Gardening & Houseplants WordPress Theme Type Theme Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2025-31051 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ca2fd8b84100 Credit...

WordPress HotStar – Multi-Purpose Business Theme Theme <= 1.4 is vulnerable to Broken Access Control

Software HotStar – Multi-Purpose Business Theme Type Theme Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Broken Access Control CVE CVE-2025-31071 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bb3eaed13631 Credits Tran...

SUSE: Security Advisory (SUSE-SU-2025:1537-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...