PT-2025-5139 · Unknown · Wellwisher Custom Widget Classes

Name of the Vulnerable Software and Affected Versions: wellwisher Custom Widget Classes versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user into performi...

WordPress plugin MercadoLibre Integration 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress plugin SetMore Theme – Custom Post Types 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin SetMore...

PT-2025-4693 · Unknown · Lijit Search

Name of the Vulnerable Software and Affected Versions: Lijit Search versions n/a through 1.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject malicious...

WordPress plugin Lijit Search 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-3193 · Unknown · Canlineapp Online

Name of the Vulnerable Software and Affected Versions: Canlineapp Online version 1.1 Description: The issue concerns improper authorization checks, allowing users with the Auditor role to create an audit template, a feature designated for the supervisor role. This results from broken access...

PT-2025-4502 · Unknown · Roninwp Fat Event Lite

Name of the Vulnerable Software and Affected Versions: Roninwp FAT Event Lite versions 1.1 and earlier Description: The issue is related to an improper control of filename for include/require statement in a PHP program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File...

Canlineapp Online 安全漏洞

Canlineapp Online is an application from Canlineapp, Inc. A security vulnerability exists in Canlineapp Online version 1.1, which stems from an access control failure...

CVE-2025-22502

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mindvalley MindValley Super PageMash mindvalley-pagemash allows SQL Injection.This issue affects MindValley Super PageMash: from n/a through = 1.1...

CVE-2025-22502

CVE-2025-22502 describes an SQL Injection vulnerability in Mindvalley MindValley Super PageMash. The initial description states an improper neutralization of special elements used in SQL commands, enabling injection. The vulnerability is linked to MindValley Super PageMash versions from n/a up to...

CVE-2025-22581 WordPress Arcade Ready plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bytephp Arcade Ready allows Stored XSS.This issue affects Arcade Ready: from n/a through 1.1...

WordPress MindValley Super PageMash Plugin <= 1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin MindValley Super PageMash versions = 1.1...

PT-2025-1657 · WordPress · Image Magnify

Name of the Vulnerable Software and Affected Versions: Image Magnify plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'image magnify' shortcode due to insufficient input sanitization and output escaping on...

WordPress plugin MindValley Super PageMash SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

WordPress plugin Arcade Ready 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-4513 · Unknown · Tock Widget

Name of the Vulnerable Software and Affected Versions: Tock Widget versions n/a through 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross Site Request Forgery. This is a type of attack where an attacker can trick a user into performing...

WordPress Chative Live chat and Chatbot plugin <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function vulnerability

Cross-Site Request Forgery via addchativewidgetaction Function vulnerability discovered by Peter Thaleikis in WordPress Plugin Chative Live chat and Chatbot versions = 1.1...

PT-2025-2998 · Unknown · Com.Glitter.Caller.Screen

Name of the Vulnerable Software and Affected Versions: com.glitter.caller.screen versions 1.1 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component. This enable...

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 安全漏洞

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer is a premium color caller screen and dialer from Wallfinity: Lovely Caller Theme. A security vulnerability exists in Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 1.1 and prior versions, which stems from a crafted inten...

WordPress plugin Point 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...