5215 matches found
CVE-2025-49953
Summary: CVE-2025-49953 affects the WordPress plugins ShareBang and Ultimate Social Share Buttons for WordPress (versions through 1.4). Vulnerability: Improper input neutralization during web page generation enables Reflected Cross-Site Scripting (XSS). Root cause: Inadequate handling of user-sup...
CVE-2025-49929
Summary: WordPress plugin Ultimate Blocks (versions up to 3.3.6) is affected by a stored XSS vulnerability caused by improper input neutralization during web page generation. Affected software: Ultimate Blocks plugin for WordPress, до version 3.3.6. Impact (as stated): Stored Cross-Site Scripting...
CVE-2025-49929 WordPress Ultimate Blocks plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows Stored XSS.This issue affects Ultimate Blocks: from n/a through = 3.3.6...
WordPress Plugin Ultimate Blocks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-43326
Name of the Vulnerable Software and Affected Versions quantumcloud KBx Pro Ultimate versions through 8.0.5 Description A flaw exists in quantumcloud KBx Pro Ultimate that allows for object injection due to deserialization of untrusted data. This issue impacts the knowledgebase-helpdesk-pro...
WordPress Plugin KBx Pro Ultimate 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...
PT-2025-43354
Name of the Vulnerable Software and Affected Versions Themepoints Tab Ultimate versions through 1.8 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially allowing for Cross-site Scripting XSS. This could allow an attacker ...
CVE-2025-62060: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...
CVE-2025-49929: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows Stored XSS.This issue affects Ultimate Blocks: from n/a through = 3.3.6...
CVE-2025-49953: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeinity ShareBang, Ultimate Social Share Buttons for WordPress sharebang allows Reflected XSS.This issue affects ShareBang, Ultimate Social Share Buttons for WordPress: from n/a through = 1.4...
WordPress plugin Tab Ultimate 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-43193
Name of the Vulnerable Software and Affected Versions Ultimate Blocks versions through 3.3.6 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Cross-site Scripting XSS. This allows for the injection of malicious scripts into we...
CVE-2025-60232: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a through = 8.0.5...
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-11814
The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to 3.21.1 exclusive due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...
Malicious code in n8n-nodes-phoai-ultimate-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0597dd3ed4c831f52ef8792943f8d12a9880e5f4a3777f84e83284d14ffe78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48438 Malicious code in n8n-nodes-phoai-ultimate-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0597dd3ed4c831f52ef8792943f8d12a9880e5f4a3777f84e83284d14ffe78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
