33073 matches found
WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Job Board Manager versions = 2.1.61...
WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerability
SQL Injection vulnerability discovered by NAWardRox in WordPress Plugin WPSmartContracts versions = 2.0.12...
Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS Vulnerability
Microsoft has released security fixes to address a massive set of 126 flaws affecting its software products, including one vulnerability that it said has been actively exploited in the wild. Of the 126 vulnerabilities, 11 are rated Critical, 112 are rated Important, and two are rated Low in...
WordPress Photography Theme <= 7.5.2 is vulnerable to Server Side Request Forgery (SSRF)
Software Photography Type Theme Vulnerable versions = 7.5.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2025-30964 Patch priority Low CVSS severity Low 5.4 Developer EPC PSID 1dff91d3e1ce Credits Rafie Muhammad Patchstack Required...
Remote Desktop Client RCE Vulnerability (Apr 2025) - Windows
Remote Desktop Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora: Security Advisory (FEDORA-2025-31036092ea)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-4121-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:1149-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Word 2016 Multiple Vulnerabilities (KB5002702)
This host is missing an important security update according to Microsoft KB5002702 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2016 RCE Vulnerability (KB5002703)
This host is missing an important security update according to Microsoft KB5002703 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2016 RCE Vulnerability (KB4484432)
This host is missing an important security update according to Microsoft KB4484432 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
WordPress WP Project Manager plugin <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by siavashvafshar in WordPress Plugin WP Project Manager versions = 2.6.22...
WordPress Vayu Blocks plugin 1.0.4-1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update vulnerability
Missing Authorization to Unauthenticated Limited Arbitrary Options Update vulnerability discovered by kr0d in WordPress Plugin Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce versions 1.0.4-1.2.1...
WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by theviper17 in WordPress Plugin Bulk Product Sync versions = 8.6...
WordPress Site Notify plugin <= 1.0 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Vo Thi Ngoc Nhi in WordPress Plugin Site Notify versions = 1.0...
WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000025 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin Insert or Embed Articulate Content into WordPress versions = 4.3000000025...
WordPress Processing Projects Plugin <= 1.0.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Processing Projects versions = 1.0.2...
WordPress WP Remote Thumbnail Plugin <= 1.3.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Le Ngoc Anh in WordPress Plugin WP Remote Thumbnail versions = 1.3.2...
WordPress Hive Support plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by hunter85 in WordPress Plugin Hive Support versions = 1.2.10...
