27229 matches found
CVE-2025-68885 WordPress Custom Post Status plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in page-carbajal Custom Post Status custom-post-status allows Stored XSS.This issue affects Custom Post Status: from n/a through = 1.1.0...
CVE-2025-68885
CVE-2025-68885: Cross-Site Request Forgery in the Page Carbajal Custom Post Status plugin enables Stored XSS, affecting Custom Post Status up to version 1.1.0. CVSS 3.1 base 7.1 (HIGH). No exploitation details or fixes are provided in the initial or connected documents; refer to Patchstack listin...
WordPress Custom Post Status plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Skalucy in WordPress Plugin Custom Post Status versions = 1.1.0...
SUSE CVE-2023-54280
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993307)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993307 advisory. In the Linux kernel, the following vulnerability has been resolved: virtiopmem: Check device status before requesting flush If a pmem device is in a bad status, the...
PT-2025-54281
Name of the Vulnerable Software and Affected Versions Page Carbajal Custom Post Status versions through 1.1.0 Description A Cross-Site Request Forgery CSRF issue exists in Page Carbajal Custom Post Status, which can also lead to Stored Cross-Site Scripting XSS. The issue impacts the Custom Post...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993093)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993093 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidstatus There is this warning when using a kernel wi...
Linux Distros Unpatched Vulnerability : CVE-2023-54292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Fix data race on CQP request done KCSAN detects a data race on cqprequest-requestdone memory location which is accessed locklessly in irdmahandlecqp...
WordPress plugin Ultimate Post Kit Addons for Elementor has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...
WordPress plugin Custom Post Status has a vulnerability related to cross-site request fraud.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...
WordPress Cost Calculator Builder plugin <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions vulnerability
Authenticated Subscriber+ Missing Authorization via getccorders/updateorderstatus Functions vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Cost Calculator Builder versions = 3.5.32...
CVE-2025-68885: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in page-carbajal Custom Post Status custom-post-status allows Stored XSS.This issue affects Custom Post Status: from n/a through = 1.1.0...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993105)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993105 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioc...
CVE-2025-69257
creationtimestamp| type| source ---|---|--- 2025-12-30 22:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbag76nyee2x 2026-01-24 22:44:19+00:00| seen| https://gist.github.com/alon710/5f1f59b372627b43576ca003c1b2b010...
EUVD-2023-60392
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...
UBUNTU-CVE-2023-54280
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...
CVE-2023-54249
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...
UBUNTU-CVE-2023-54249
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...
CVE-2025-68982
creationtimestamp| type| source ---|---|--- 2025-12-30 12:36:20+00:00| seen| https://gist.github.com/Darkcrai86/86495298d345190451d457e608a9bed7 2025-12-31 04:18:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbaz4daqzn22...