CVE-2009-20010

Dogfood CRM 2.0.10 suffers a remote command execution vulnerability in the spell.php script used by its mail subsystem. The flaw arises from unsanitized user input passed via a POST to the data parameter, which is then processed by the underlying shell without proper escaping, enabling attackers ...

PT-2025-35366

Name of the Vulnerable Software and Affected Versions: Dogfood CRM version 2.0.10 Description: Dogfood CRM version 2.0.10 contains a remote command execution issue in the spell.php script used by its mail subsystem. The flaw is due to unsanitized user input passed via a POST request to the data...

Malicious code in spell-check-test (npm)

The package spell-check-test was found to contain malicious code...

MAL-2025-33738 Malicious code in spell-check-test (npm)

The package spell-check-test was found to contain malicious code...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-22143

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17...

CVE-2023-44156

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

CVE-2022-2658

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2019-6027

Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-1985

In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog when selecting an untrusted spell checker due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2005-2042

Cross-site scripting XSS vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags...

CVE-2025-25111

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

CVE-2025-25111

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

CVE-2025-25111 WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

CVE-2025-25111

CVE-2025-25111 (WP Spell Check) is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin WP Spell Check up to version 9.21. The initial document shows a CVSS v3.1 base score of 5.4 (MEDIUM) with metrics: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L. Several sources (NVD, Red Hat...

CVE-2025-25111 WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

WordPress plugin WP Spell Check 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Khang Duong in WordPress Plugin WP Spell Check versions = 9.21...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...