CVE-2025-25111 WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

CVE-2025-25111

CVE-2025-25111 (WP Spell Check) is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin WP Spell Check up to version 9.21. The initial document shows a CVSS v3.1 base score of 5.4 (MEDIUM) with metrics: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L. Several sources (NVD, Red Hat...

CVE-2025-25111 WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

CVE-2025-25111: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

WordPress plugin WP Spell Check 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Khang Duong in WordPress Plugin WP Spell Check versions = 9.21...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

The CVE-2024-49386 entry affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from spell-jacking, leading to sensitive information disclosure (confidentiality impact HIGH; integrity/availability not affected per the provided sources). No exploitation details are ...

Sensitive information disclosure due to spell-jacking

...

CVE-2024-49386: Exposure of Private Personal Information to an Unauthorized Actor

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

PT-2024-33499 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions prior to 9.0.0x24 Description: The issue is related to sensitive information disclosure due to spell-jacking. Recommendations: For versions prior to 9.0.0x24, update to a version equal to or later than...

Motion Spell GPAC Null Pointer Dereference Vulnerability

Motion Spell GPAC contains a null pointer dereference vulnerability that could allow a local attacker to cause a denial-of-service DoS condition...

Hunspell: Multiple Vulnerabilities

Background Hunspell is the spell checker of LibreOffice, OpenOffice.org, Mozilla Firefox & Thunderbird, Google Chrome. Description Malicious input to the hunspell spell checker could result in an application crash or other unspecified behavior. Impact Malicious input to the hunspell spell checker...

CVE-2024-45312

Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 or 4.2.7 for the 4.x series contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the aspell executable running on the...

CVE-2024-45312 Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf

Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 or 4.2.7 for the 4.x series contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the aspell executable running on the...

CVE-2024-45312: Improper Restriction of Names for Files and Other Resources

Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 or 4.2.7 for the 4.x series contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the aspell executable running on the...

[SECURITY] Fedora 39 Update: roundcubemail-1.6.7-1.fc39

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...