WordPress plugins and vulnerabilities in WordPress code

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress plugin Simple Business Directory Pro has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin Simple Link Directory has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2025-34003 · Mitchell Bennis · Simple File List

Name of the Vulnerable Software and Affected Versions: Mitchell Bennis Simple File List versions through 6.1.14 Description: An improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in Mitchell Bennis Simple File List, allowing path traversal. Recommendations:...

PT-2025-33920 · Unknown · Simple Business Directory Pro

Name of the Vulnerable Software and Affected Versions: Simple Business Directory Pro versions through 15.5.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Reflected Cross-site Scripting XSS. Recommendations: Update Simple...

PT-2025-33989 · Unknown · Simple Business Directory Pro

Name of the Vulnerable Software and Affected Versions: Simple Business Directory Pro affected versions not specified Description: An incorrect privilege assignment issue exists in Simple Business Directory Pro, allowing for privilege escalation. Recommendations: At the moment, there is no...

D-Link DIR-860L Router Command Execution

The vulnerability of the ssdpcgimain function in D-Link DIR-860L router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands b...

PT-2025-33929 · Unknown · Quantumcloud Simple Link Directory

Name of the Vulnerable Software and Affected Versions: quantumcloud Simple Link Directory affected versions not specified Description: The software contains an improper neutralization of input during web page generation, which results in a reflected cross-site scripting XSS issue. Recommendations...

CVE-2025-54021: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through = 6.1.14...

CVE-2025-53580: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

CVE-2025-48162: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Reflected XSS.This issue affects Simple Business Directory Pro: from n/a through = 15.5.1...

CVE-2025-49438: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3...

CVE-2025-48297: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Reflected XSS.This issue affects Simple Link Directory: from n/a through 14.8.1...

PT-2025-33956 · Unknown · Simple-Login-Log

Name of the Vulnerable Software and Affected Versions: Simple Login Log versions through 1.1.3 Description: Deserialization of untrusted data in Simple Login Log allows object injection. Recommendations: Update Simple Login Log to a version later than 1.1.3...

WordPress plugin Simple File List has a path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

Linux Distros Unpatched Vulnerability : CVE-2019-12216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is a heap-base...

Linux Distros Unpatched Vulnerability : CVE-2019-12222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9. There is an out-of-bounds read in the function SDLInvalidateMap at video/SDLpixels.c...

CVE-2025-9026

A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...

WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin Simple Login Log versions = 1.1.3...

Announcing Nmap 7.95 Upgrade and More Accurate Simple Network Management Protocol (SNMP) Fingerprinting

At Rapid7, our commitment is to provide you with the most accurate and reliable scan data possible; as such, we are continuously updating our underlying technology. Today we are excited to announce an upcoming enhancement to the InsightVM scan engine, aimed at improving the accuracy of Simple...