122 matches found
CVE-2025-57941 WordPress Append Link on Copy Plugin <= 0.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JonathanMH Append Link on Copy allows Stored XSS. This issue affects Append Link on Copy: from n/a through 0.2...
CVE-2025-58200
CVE-2025-58200 : CSRF vulnerability in the Flexible FAQ (WordPress plugin). Documented as affecting Flexible FAQ up to version 0.2; no public exploit details in the provided sources. The connected docs confirm a CSRF issue in this plugin, but remediation/version specifics beyond 0.2 are not provi...
PT-2025-38884
Name of the Vulnerable Software and Affected Versions Bage Flexible FAQ versions through 0.2 Description A Cross-Site Request Forgery CSRF issue exists in Bage Flexible FAQ. This allows for the execution of unwanted actions on behalf of an authenticated user. Recommendations At the moment, there ...
WordPress plugin Plugin updates blocker 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2025-9374
The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to import tags granted they can...
WordPress Ultimate Tag Warrior Importer plugin <= 0.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Ultimate Tag Warrior Importer versions = 0.2...
Linux Distros Unpatched Vulnerability : CVE-2017-11654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remo...
Linux Distros Unpatched Vulnerability : CVE-2021-33896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators. CVE-2021-33896 Note that...
Linux Distros Unpatched Vulnerability : CVE-2013-7401
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parserequest function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service crash via a URI without a or ? character in an ICAP...
CVE-2025-53219
Cross-Site Request Forgery CSRF vulnerability in pl4g4 WP-Database-Optimizer-Tools wp-database-optimizer-tools allows Cross Site Request Forgery.This issue affects WP-Database-Optimizer-Tools: from n/a through = 0.2...
WordPress plugin WP-Database-Optimizer-Tools 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2025-8688
CVE-2025-8688 : The WordPress plugin Inline Stock Quotes (versions
PT-2025-32621 · WordPress · Inline Stock Quotes
Name of the Vulnerable Software and Affected Versions: Inline Stock Quotes plugin for WordPress versions up to and including 0.2 Description: The Inline Stock Quotes plugin for WordPress is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on...
CVE-2025-53074
Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2...
Nokia Single RAN 安全漏洞
Nokia Single RAN is a wireless network technology from Nokia, Finland. A security vulnerability exists in Nokia Single RAN 24R1-SR prior to version 0.2 MP, which stems from improper privilege management and could result in elevated privileges...
UBUNTU-CVE-2025-0634
Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2...
CVE-2025-0634
CVE-2025-0634 Reports a Use After Free in Samsung Open Source rlottie (V0.2) that enables Remote Code Inclusion. Affected component: rlottie library used by Samsung, with NVD listing a 3.1 base score of 9.8 (CRITICAL) and impact to Confidentiality, Integrity, Availability. The TencentOSS/Tenables...
CVE-2025-0634
Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2...
WordPress plugin kk Youtube Video 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-51573
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ersatzpole ML Responsive Audio player with playlist Shortcode mlr-audio allows Stored XSS.This issue affects ML Responsive Audio player with playlist Shortcode: from n/a through = 0.2...