CVE-2025-48297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Reflected XSS.This issue affects Simple Link Directory: from n/a through 14.8.1...

CVE-2025-53580

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

PT-2025-34356 · Unknown · Jeff Starr Simple Statistics For Feeds

Name of the Vulnerable Software and Affected Versions: Jeff Starr Simple Statistics for Feeds versions n/a through 20250322 Description: A Cross-Site Request Forgery CSRF issue exists in Jeff Starr Simple Statistics for Feeds, potentially allowing attackers to perform actions on behalf of...

CVE-2025-57892: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through = 20250322...

Linux Distros Unpatched Vulnerability : CVE-2020-35532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibRaw, an out-of-bounds read vulnerability exists within the simpledecoderow function libraw\src\x3f\x3futilspatched.cpp which can be triggered via an image...

CVE-2025-54021

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through = 6.1.14...

CVE-2025-53580

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

CVE-2025-49438

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3...

CVE-2025-48297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Reflected XSS.This issue affects Simple Link Directory: from n/a through 14.8.1...

CVE-2025-49438 WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3...

CVE-2025-49438 WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3...

CVE-2025-48162 WordPress Simple Business Directory Pro <= 15.5.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Business Directory Pro allows Reflected XSS. This issue affects Simple Business Directory Pro: from n/a through 15.5.1...

CVE-2025-48297 WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Link Directory allows Reflected XSS. This issue affects Simple Link Directory: from n/a through n/a...

CVE-2025-48297 WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Reflected XSS.This issue affects Simple Link Directory: from n/a through 14.8.1...

CVE-2025-48297

CVE-2025-48297 is a reflected XSS in WordPress Simple Link Directory prior to 14.8.1 caused by improper input neutralization during web page generation. Affected plugin versions are older than 14.8.1; CVSS v3.1 base score 7.1 (HIGH). Remediation: update to WordPress Simple Link Directory 14.8.1 o...

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

CVE-2025-53580

CVE-2025-53580 affects WordPress plugin Simple Business Directory Pro (versions before 15.6.9). Root cause: incorrect privilege assignment enabling unauthenticated privilege escalation. CVSS 3.1 vector: Network, Low attack complexity, Privileges Required: NONE; Impact: Confidentiality/Integrity/A...

CVE-2025-54021

CVE-2025-54021 affects WordPress plugin Simple File List (versions up to 6.1.14). The vulnerability is caused by an improper limitation of a pathname to a restricted directory (path traversal) , enabling an arbitrary file download. Public details list affected software as Simple File List: from n...

CVE-2025-54021 WordPress Simple File List <= 6.1.14 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitchell Bennis Simple File List allows Path Traversal. This issue affects Simple File List: from n/a through 6.1.14...

CVE-2025-54021 WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through = 6.1.14...