WordPress plugin Findgo 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-33194 · Unknown · Bestiadurmiente Visit Counter

Name of the Vulnerable Software and Affected Versions: BestiaDurmiente Visit Counter versions n/a through 1.0 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: At the moment, there is no information about a newer...

PT-2025-33158 · Unknown · Zoomit Foodmenu

Name of the Vulnerable Software and Affected Versions: ZoomIt FoodMenu versions n/a through 1.20 Description: ZoomIt FoodMenu is susceptible to a reflected cross-site scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Versions prior to 1.21 ar...

PT-2025-33377 · Artiosmedia · Artiosmedia Rss Feed Pro

Name of the Vulnerable Software and Affected Versions: artiosmedia RSS Feed Pro versions through 1.1.8 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which results in a Stored Cross-site Scripting condition. Recommendations: Update...

PT-2025-33369 · Unknown · Kodeshpa Simplified

Name of the Vulnerable Software and Affected Versions: kodeshpa Simplified versions n/a through 1.0.9 Description: A Server-Side Request Forgery SSRF vulnerability exists in kodeshpa Simplified. This issue allows for Server Side Request Forgery. Recommendations: Update kodeshpa Simplified to a...

PT-2025-33217 · Vonstroheim · Vonstroheim Thebooking

Name of the Vulnerable Software and Affected Versions: VonStroheim TheBooking versions n/a through 1.4.4 Description: TheBooking software contains a missing authorization flaw that allows access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update...

PT-2025-33389 · Unknown · Shahjada Wpdm – Premium Packages

Name of the Vulnerable Software and Affected Versions: Shahjada WPDM – Premium Packages versions through 6.0.2 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users. Recommendations: Update Shahja...

CVE-2025-8847

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is the function Edit of the file /system/notice/edit. The manipulation of the argument noticeTitle/noticeContent leads to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-54229

CVE-2025-54229 affects Adobe FrameMaker versions 2020.8, 2022.6 and earlier. The issue is a Use-After-Free vulnerability that could lead to arbitrary code execution in the current user context . Exploitation requires user interaction (opening a malicious file). Connected sources indicate the vuln...

CVE-2025-54188

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54204 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54202

CVE-2025-54202 affects Adobe Substance3D Modeler up to version 1.22.0 and earlier, with an out-of-bounds read that could disclose memory contents. Exploitation requires the user to open a malicious file (user interaction), and CVSSv3.1 base score is 5.5 (Medium). Connected sources corroborate thi...

CVE-2025-54201

CVE-2025-54201 affects Adobe Substance 3D Modeler (versions 1.22.0 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory. Exploitation requires a user to open a malicious file. A mitigation is to apply the vendor update (Adobe APSB25-76) or newer releases; the advi...

CVE-2025-54198

Summary: CVE-2025-54198 affects Adobe Substance3D Modeler. Affected versions: Substance3D Modeler 1.22.0 and earlier. Vulnerability and impact: an out-of-bounds read could disclose sensitive memory; exploitation requires the victim to open a malicious file (user interaction). CVSS shows Local att...

CVE-2025-54198 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-8418

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1.1.30. This is due to missing capability checks on the activatedplugin function. This makes it possible for authenticated attackers, with...

CVE-2025-5391

The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-8688 Inline Stock Quotes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock Shortcode

The Inline Stock Quotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock shortcode in all versions up to, and including, 0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

Linux Distros Unpatched Vulnerability : CVE-2023-52519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit The EHL Elkhart Lake based...