[SECURITY] Fedora 43 Update: wordpress-6.8.3-1.fc43

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

CVE-2025-6680

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3. This makes it possible for authenticated attackers, with tutor-level access and above, to view assignments for courses they don't...

CVE-2025-11269 Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update

The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings...

CVE-2025-11823

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buttonexisttext' parameter in the 'wishsuitebutton' shortcode in all versions up to, and including, 3.2.4 due to insufficient...

CVE-2025-60936

Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability allows authenticated attackers with API access to inject malicious JavaScript code that executes when administrators view the application logs...

PT-2025-44019

Name of the Vulnerable Software and Affected Versions Pi-hole Admin Interface versions 6.2.1 and earlier Description The Pi-hole Admin Interface, a web interface for managing the Pi-hole network-level advertisement and internet tracker blocking application, is susceptible to reflected cross-site...

Fedora 43 : suricata (2025-00748128e3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-00748128e3 advisory. Upstream security and bugfix release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 43 : dovecot (2025-97d8911108)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-97d8911108 advisory. fix CVE-2025-30189 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : wireshark (2025-f7d3e3c373)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f7d3e3c373 advisory. New version 4.6.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 43 : podman-tui (2025-d3389aa39a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d3389aa39a advisory. podman-tui release v1.9.0 ---- podman-tui release 1.8.1 Tenable has extracted the preceding description block directly from the Fedora security...

PT-2025-43715

Name of the Vulnerable Software and Affected Versions Testimonial Carousel For Elementor plugin for WordPress versions prior to 11.6.3 Description The Testimonial Carousel For Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and...

Fedora 43 : mingw-python3 (2025-ec083036ae)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ec083036ae advisory. Update to python-3.11.14, fixes CVE-2025-8291. Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...

Fedora 43 : python3.10 (2025-5ac68ff957)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5ac68ff957 advisory. Update to Python 3.10.19 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 43 : mingw-binutils (2025-0e1e9728f0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0e1e9728f0 advisory. Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495. ---- Update to binutils-2.45. Tenable has extracted the preceding...

Fedora 43 : gi-docgen (2025-86cf4f2eed)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-86cf4f2eed advisory. gi-docgen 2025.5 - 2025-10-11 This is a security fix for CVE-2025-11687. The severity of this issue depends on what else is hosted on the same domain as the...

Fedora 43 : fetchmail (2025-891d4dd5d6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-891d4dd5d6 advisory. Update to fetchmail-6.5.6 CVE-2025-61962 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 43 : cri-o1.32 (2025-661c377e53)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-661c377e53 advisory. - Update to release 1.32.9 - Resolves: rhbz2333357, rhbz2398407, rhbz2398662, rhbz2399064, rhbz2399338 - Upstream fix Tenable has extracted the...

Fedora 43 : insight (2025-d4476478fd)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d4476478fd advisory. Fix CVS 2025-11082 and 2025-11083. + conditional for explicit BR tcl/tk 8 + dummy rpm check section. Tenable has extracted the preceding description...

Fedora 43 : docker-buildkit (2025-f7a2d648e7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f7a2d648e7 advisory. - Update to release v0.25.0 - Resolves: rhbz2399354, rhbz2399081, rhbz2398678, rhbz2398424 - Upstream feature additions and fixes Tenable has...

Fedora 43 : bind (2025-9df77858e9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9df77858e9 advisory. - Moved /var/named.ca into /etc/named.ca file. The original place has symlink instead. - Moved /var/named/named.localhost, /var/named/named.loopback and...