CVE-2025-22315 WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Typing Text typing-text allows Stored XSS.This issue affects Typing Text: from n/a through = 1.2.7...

CVE-2025-22315

CVE-2025-22315 is a Stored XSS in WPDeveloper Typing Text (WordPress). The issue arises from improper neutralization of input during web page generation, affecting Typing Text versions from n/a to 1.2.7. The connected Red Hat and ENISA entries corroborate the same CVE description. Public impact d...

CVE-2025-22315 WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Typing Text allows Stored XSS.This issue affects Typing Text: from n/a through 1.2.7...

WordPress plugin Typing Text 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from a crash that could be exploited when segmenting specially crafted text, where the segmentation would corru...

PT-2025-3807

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134 Firefox ESR versions prior to 128.6 Thunderbird versions prior to 134 Thunderbird versions prior to 128.6 Description The issue arises when segmenting specially crafted text, leading to memory corruption and a...

PT-2025-4430 · WordPress · Wpdeveloper Typing Text

Name of the Vulnerable Software and Affected Versions: WPDeveloper Typing Text versions 1.2.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attacker can inject malicious...

CVE-2024-8474

OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic...

WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Typing Text versions = 1.2.7...

Cleartext Transmission Of Sensitive Information

Keycloak is vulnerable to plain text replication. The vulnerability is due to the environment option KCCACHEEMBEDDEDMTLSENABLED not functioning as intended, resulting in JGroups replication configuration always using plain text, which allows attackers on adjacent networks to intercept and read...

iTerm2 安全漏洞

iTerm2 is a terminal emulation program written for Mac OS X by George Nachman, a personal developer. A security vulnerability exists in iTerm2. A remote attacker can exploit the vulnerability to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file...

PT-2025-54918

Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3 Description Dovecot includes a script for converting attachments to text that improperly handles zip-style attachments. An attacker could leverage specially crafted OOXML documents to cause unintended files on t...

PT-2025-36479

Name of the Vulnerable Software and Affected Versions: SQLite FTS5 extension affected versions not specified Description: An integer overflow exists in the FTS5 extension. The issue occurs when calculating the size of an array of tombstone pointers, leading to truncation into a 32-bit integer. Th...

PT-2025-30880

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw where uprobes could be misused destructively when placed within an instruction. The kernel validated the presence of a valid instruction at the specifie...

CVE-2024-56218

Cross-Site Request Forgery CSRF vulnerability in sevenspark Contact Form 7 – Dynamic Text Extension contact-form-7-dynamic-text-extension allows Cross Site Request Forgery.This issue affects Contact Form 7 – Dynamic Text Extension: from n/a through = 5.0.1...

CVE-2024-56218

Cross-Site Request Forgery CSRF vulnerability in AuRise Creative, SevenSpark Contact Form 7 Dynamic Text Extension allows Cross Site Request Forgery.This issue affects Contact Form 7 Dynamic Text Extension: from n/a through 5.0.1...

CVE-2024-56218 WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AuRise Creative, SevenSpark Contact Form 7 Dynamic Text Extension allows Cross Site Request Forgery.This issue affects Contact Form 7 Dynamic Text Extension: from n/a through 5.0.1...

CVE-2024-56218

CVE-2024-56218 describes a Cross-Site Request Forgery (CSRF) vulnerability in Contact Form 7 Dynamic Text Extension (AuRise Creative, SevenSpark). The description states CSRF is possible in versions CF7 Dynamic Text Extension from n/a through 5.0.1. The connected documents confirm the issue type ...

PT-2024-36752 · WordPress · Contact Form 7 – Dynamic Text Extension

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Dynamic Text Extension versions n/a through 5.0.1 Description: A Cross-Site Request Forgery CSRF issue affects the Contact Form 7 Dynamic Text Extension, allowing unauthorized requests. This can lead to Cross Site Request...

PT-2024-36755 · Ssl Wireless · Ssl Wireless Sms Notification

Name of the Vulnerable Software and Affected Versions: SSL Wireless SMS Notification versions n/a through 3.5.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability in SSL Wireless SMS Notification, which allows Privilege Escalation. Recommendations: For versions n...