PT-2025-34913 · Unknown · Simple Download Monitor

Name of the Vulnerable Software and Affected Versions: Simple Download Monitor versions through 3.9.34 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Updat...

Linux Distros Unpatched Vulnerability : CVE-2022-42334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to...

Linux Distros Unpatched Vulnerability : CVE-2020-28086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password,...

Important: Red Hat Security Advisory: Insights proxy Container Image

Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...

Linux Distros Unpatched Vulnerability : CVE-2019-18424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a...

CVE-2025-57892

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through = 20250322...

CVE-2025-57885

CVE-2025-57885 is a CSRF flaw in Shahjahan Jewel Fluent Support (WordPress Fluent Support plugin) affecting versions up to 1.9.1. The issue enables CSRF on authenticated actions and has a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, requiring user interaction. Public reference...

CVE-2025-53987

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...

CVE-2025-54028

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows PHP Local File Inclusion.This issue affects CF7 WOW Styler: from n/a through = 1.7.2...

PT-2025-34356 · Unknown · Jeff Starr Simple Statistics For Feeds

Name of the Vulnerable Software and Affected Versions: Jeff Starr Simple Statistics for Feeds versions n/a through 20250322 Description: A Cross-Site Request Forgery CSRF issue exists in Jeff Starr Simple Statistics for Feeds, potentially allowing attackers to perform actions on behalf of...

Phone Searches at the US Border Hit a Record High

Customs and Border Protection agents searched nearly 15,000 devices from April through June of this year, a nearly 17 percent spike over the previous three-month high in 2022...

CVE-2025-54034

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Tribulant Software Newsletters newsletters-lite allows PHP Local File Inclusion.This issue affects Newsletters: from n/a through = 4.10...

CVE-2025-49408

CVE-2025-49408 concerns the WPDeveloper Templately WordPress plugin. The issue is described as an Insertion of Sensitive Information Into Sent Data (information disclosure) that could allow retrieval of embedded sensitive data. Affected software: Temptately versions up to 3.2.7. Public detail con...

CVE-2025-30975

CVE-2025-30975 affects the WordPress plugin Add Custom Codes (versions up to 4.80). The issue is described as Improper Control of Generation of Code (Code Injection) allowing Remote Code Execution for authenticated users (Contributor+). Documents confirm the vulnerability is still unpatched (Patc...

CVE-2025-53205

The CVE-2025-53205 entry refers to a Reflected XSS in LambertGroup Radio Player Shoutcast & Icecast (WordPress plugin lbg-audio4-html5-shoutcast) up to version 4.4.7. Root cause: Improper neutralization of input during web page generation. Impact: potential execution of malicious scripts in a use...

CVE-2025-53565

CVE-2025-53565 concerns the WordPress plugin Widget for Google Reviews (RadiusTheme) and is triggered by an improper control of filename for include/require statements, i.e., a PHP Remote File Inclusion that allows PHP Local File Inclusion. Affected software: RadiusTheme Widget for Google Reviews...

CVE-2025-53993

CVE-2025-53993 affects Crocoblock JetPopup (WordPress plugin) up to version 2.0.15. The issue is insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Public details across multiple sources confirm the vulnerability, its presence in JetPopup

CVE-2025-54040 WordPress Webba Booking <= 5.1.20 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through = 5.1.20...

PT-2025-33952 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions not specified through 1.3 Description: A Cross-Site Request Forgery CSRF issue exists in Dourou Cookie Warning, allowing attackers to perform Cross-Site Request Forgery attacks. Recommendations: At the moment,...

PT-2025-33983 · WordPress · Lambertgroup Universal Video Player - Addon For Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: LambertGroup Universal Video Player - Addon for WPBakery Page Builder versions through 3.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site Scripting...