CVE-2025-26985

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through = 1.0.6...

CVE-2025-26974

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore Locator: from n/a through = 2.5.1...

PT-2025-14114 · Zoho · Zoho Flow

Name of the Vulnerable Software and Affected Versions: Zoho Flow versions n/a through 2.13.3 Description: The issue is related to a Missing Authorization vulnerability in Zoho Flow, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

CVE-2024-38290

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met...

CVE-2025-26957

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Deetronix Affiliate Coupons affiliate-coupons allows PHP Local File Inclusion.This issue affects Affiliate Coupons: from n/a through = 1.7.3...

CVE-2025-26949 WordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Team Section Block team-section allows Stored XSS.This issue affects Team Section Block: from n/a through = 1.0.9...

CVE-2025-27012

Cross-Site Request Forgery CSRF vulnerability in a1post A1POST.BG Shipping for Woo a1post-bg-shipping-for-woocommerce allows Privilege Escalation.This issue affects A1POST.BG Shipping for Woo: from n/a through = 1.5...

CVE-2025-26763

Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Object Injection.This issue affects Responsive Slider by MetaSlider: from n/a through = 3.94.0...

CVE-2025-27344

Cross-Site Request Forgery CSRF vulnerability in filipstepanov Phee's LinkPreview linkpreview allows Cross Site Request Forgery.This issue affects Phee's LinkPreview: from n/a through = 1.6.7...

CVE-2025-27312

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jenst WP Sitemap wp-sitemap allows SQL Injection.This issue affects WP Sitemap: from n/a through = 1.0...

CVE-2024-12916

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection. This issue affects Life4All: before 10.01.2025...

CVE-2025-27353

CVE-2025-27353 describes a Cross-Site Request Forgery (CSRF) vulnerability in Namaste! LMS, affecting Namaste! LMS versions from n/a up to and including 2.6.5. The vulnerability is confirmed in multiple sources (e.g., Patchstack reference for WordPress Namaste! LMS Plugin

CVE-2025-27315

CVE-2025-27315 is a CSRF vulnerability in WordPress All-In-One Cufon (affected: 1.3.0 and earlier). The connected Patchstack entry notes that All-In-One Cufon versions up to 1.3.0 are affected and recommends upgrading to a version that includes a fix; no exploit details are provided in the source...

Advisory ROSA-SA-2025-2703

Software: jbig2dec 0.16 OS: ROSA Virtualization 3.0 packageevrstring: jbig2dec-0.16 CVE-ID: CVE-2020-12268 BDU-ID: 2022-05687 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the jbig2imagecompose function of the jbig2imagecompose component of the jbig2image.c decoder of the JBIG2 Jbig2dec image...

Advisory ROSA-SA-2025-2699

Software: perl-HTTP-Tiny 0.074 OS: ROSA Virtualization 3.0 packageevrstring: perl-HTTP-Tiny-0.074-2 CVE-ID: CVE-2023-31486 BDU-ID: 2023-03872 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Perl HTTP::Tiny programming language library is related to errors in the TLS certificate authentication...

Advisory ROSA-SA-2025-2698

Software: perl-CPAN 2.18 OS: ROSA Virtualization 3.0 packageevrstring: perl-CPAN-2.18-397.0.1 CVE-ID: CVE-2023-31484 BDU-ID: 2023-03871 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the CPAN.pm component of the Perl programming language is related to errors in the TLS certificate authentication...

CVE-2025-22654

Unrestricted Upload of File with Dangerous Type vulnerability in kodeshpa Simplified simplified allows Using Malicious Files.This issue affects Simplified: from n/a through = 1.0.6...

CVE-2024-13792

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

PT-2025-7568 · Tenda · Tenda I12

Name of the Vulnerable Software and Affected Versions: Tenda i12 version 1.0.0.103805 Description: A buffer overflow issue was discovered in the formwrlSSIDset function through the list parameter. This issue may allow for unauthorized access or code execution. No information is provided about the...

CVE-2025-23845

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ERA404 ImageMeta imagemeta allows Reflected XSS.This issue affects ImageMeta: from n/a through = 1.1.2...