CVE-2025-60164

CVE-2025-60164 describes a CSRF flaw in the WordPress plugin NewsmanApp that enables a Stored XSS vector in versions up to 2.7.7 . The Connected documents identify the affected product and vulnerability type, but there are no details on exploits, exact impact beyond stored XSS, or a patch/recomme...

CVE-2025-53983 WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetElements For Elementor jet-elements allows Retrieve Embedded Sensitive Data.This issue affects JetElements For Elementor: from n/a through = 2.7.7...

PT-2024-12057 · WordPress · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.7 Description: The issue allows the upload of malicious files, potentially leading to security risks. This is due to an Unrestricted Upload of File with Dangerous Type...