4641 matches found
CVE-2025-1666
The Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the senduninstallsurvey function in all versions up to, and including, 4.4.1. This makes it possible for authenticate...
WordPress Cookiebot plugin <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission vulnerability
Missing Authorization to Authenticated Subscriber+ Survey Submission vulnerability discovered by Peter Thaleikis in WordPress Plugin Cookiebot versions = 4.4.1...
PT-2025-9917
Name of the Vulnerable Software and Affected Versions Cookiebot CMP by Usercentrics plugin for WordPress versions up to and including 4.4.1 Description The issue allows authenticated attackers with Subscriber-level access and above to modify data by submitting the uninstall survey on behalf of a...
CVE-2025-23485
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in richestsoft RS Survey rs-survey allows Reflected XSS.This issue affects RS Survey: from n/a through = 1.0...
CVE-2025-23485
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in richestsoft RS Survey rs-survey allows Reflected XSS.This issue affects RS Survey: from n/a through = 1.0...
CVE-2025-23485 WordPress RS Survey plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in richestsoft RS Survey rs-survey allows Reflected XSS.This issue affects RS Survey: from n/a through = 1.0...
CVE-2025-23485 WordPress RS Survey plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in richestsoft RS Survey allows Reflected XSS. This issue affects RS Survey: from n/a through 1.0...
CVE-2025-23485
CVE-2025-23485 concerns a reflected Cross-Site Scripting (XSS) in the WordPress RS Survey plugin (versions <= 1.0). The issue arises from improper input neutralization during web page generation, enabling reflected XSS when handling user-supplied input. Affected product is the RS Survey plugin...
WordPress plugin RS Survey has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
PT-2025-9348
Name of the Vulnerable Software and Affected Versions RS Survey versions n/a through 1.0 Description The issue affects the richestsoft RS Survey, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations For versions n/a through 1.0, update to ...
CVE-2025-23485: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in richestsoft RS Survey rs-survey allows Reflected XSS.This issue affects RS Survey: from n/a through = 1.0...
SUSE CVE-2024-57997
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
CVE-2024-57997
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
DEBIAN-CVE-2024-57997
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
UBUNTU-CVE-2024-57997
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
CVE-2024-57997
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
CVE-2024-57997 wifi: wcn36xx: fix channel survey memory allocation size
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
CVE-2024-57997 wifi: wcn36xx: fix channel survey memory allocation size
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
CVE-2024-57997
The CVE-2024-57997 issue affects the Linux kernel wcn36xx Wi‑Fi driver where channel survey memory allocation used an incorrect size, leading to potential use of uninitialized values when there are no frames on the channel. The root cause is a size calculation error in wcn36xx channel survey allo...
CVE-2025-1128: Unrestricted Upload of File with Dangerous Type
The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file upload, read, and deletion due to missing file type and path validation in the 'format' method of the EVFFormFieldsUpload class in all versions up...