WordPress plugin Allow SVG 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Cross-site Request Forgery (CSRF)

Overview github.com/justinas/nosurf is a HTTP package for Go that helps you prevent Cross-Site Request Forgery attacks. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to the misuse of the net/http library. An attacker can bypass CSRF checks and issue...

WordPress Opal Woo Custom Product Variation plugin <= 1.2.0 - Arbitrary File Deletion Vulnerability

Arbitrary File Deletion Vulnerability discovered by timomangcut in WordPress Plugin Opal Woo Custom Product Variation versions = 1.2.0...

CVE-2025-45616

Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...

CVE-2025-27322

CVE-2025-27322 — Reflected Cross-Site Scripting in WordPress plugin “QR Code for WooCommerce” (Bappa Mal) up to version 1.2.0. Root cause: improper input neutralization during web page generation. Affected: QR Code for WooCommerce

CVE-2025-27322 WordPress QR Code for WooCommerce Plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

CVE-2025-32516 WordPress Related Videos for JW Player plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ilGhera Related Videos for JW Player allows Reflected XSS. This issue affects Related Videos for JW Player: from n/a through 1.2.0...

WordPress plugin QR Code for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin WpBookingly 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2025-15281 · Hiredis +1 · Hiredis +1

Name of the Vulnerable Software and Affected Versions: hiredis version 1.2.0 Description: The issue allows a local attacker to cause a denial of service via the sdscatlen function. This is a buffer overflow issue that can be exploited to disrupt service. Recommendations: For hiredis version 1.2.0...

CVE-2025-31814

Cross-Site Request Forgery CSRF vulnerability in OwnerRez OwnerRez API ownerrez allows Cross Site Request Forgery.This issue affects OwnerRez API: from n/a through = 1.2.0...

CVE-2025-31737 WordPress Client Showcase plugin <= 1.2.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dxladner Client Showcase client-showcase allows Stored XSS.This issue affects Client Showcase: from n/a through = 1.2.0...

WordPress plugin OwnerRez 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

WordPress plugin Client Showcase 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-13854 · Drupal · Drupal Cache Utility

Name of the Vulnerable Software and Affected Versions: Drupal Cache Utility versions 0.0.0 through 1.2.0 Description: A Cross-Site Request Forgery CSRF issue affects the Drupal Cache Utility, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 0.0.0...

CVE-2025-22637

Cross-Site Request Forgery CSRF vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cross Site Request Forgery.This issue affects Print PDF Generator and Publisher: from n/a through = 1.2.0...

CVE-2025-22658

Cross-Site Request Forgery CSRF vulnerability in Listings for Appfolio Listings for Appfolio listings-for-appfolio allows Stored XSS.This issue affects Listings for Appfolio: from n/a through = 1.2.0...

WordPress Rapyd Payment Extension for WooCommerce plugin <= 1.2.0 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by astra.r3verii in WordPress Plugin Rapyd Payment Extension for WooCommerce versions = 1.2.0...

CVE-2025-22637

Cross-Site Request Forgery CSRF vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cross Site Request Forgery.This issue affects Print PDF Generator and Publisher: from n/a through = 1.2.0...

CVE-2025-22637

CVE-2025-22637 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Print PDF Generator and Publisher . The issue affects versions up to 1.2.0 (from n/a through 1.2.0). The provided documents confirm the vulnerability type and affected software but do not supply det...