CVE-2025-25100

Cross-Site Request Forgery CSRF vulnerability in victoracano Cazamba cazamba allows Reflected XSS.This issue affects Cazamba: from n/a through = 1.2...

CVE-2025-25100

CVE-2025-25100 is a CSRF-to-Reflected XSS in the Cazamba (Victoracano) WordPress plugin, affecting versions n/a through 1.2. The CVSS 3.1 base score is 7.1 (HIGH) with network attack vector, requiring UI interaction, and causing partial confidentiality/integrity/availability impact. The vulnerabi...

CVE-2025-30528

Cross-Site Request Forgery CSRF vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through = 1.2...

Exploit for Code Injection in Foxcms

CVE-2025-29306 FOXCMS Qianhu Content Management System Servi...

CVE-2025-30528

Cross-Site Request Forgery CSRF vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through = 1.2...

CVE-2025-30540 WordPress AvaiBook plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in avaibook AvaiBook allows Stored XSS. This issue affects AvaiBook: from n/a through 1.2...

CVE-2025-30528 WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpshopee Awesome Logos allows SQL Injection. This issue affects Awesome Logos: from n/a through 1.2...

CVE-2025-30528

CVE-2025-30528 affects the WordPress plugin Awesome Logos (

WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Awesome Logos versions = 1.2...

WordPress Portfolleo 1.2 Shell Upload

WordPress Portfolleo plugin versions 1.2 and below suffer from a remote shell upload vulnerability...

WordPress plugin Image Captcha 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress plugin Awesome Logos 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

WordPress LIVE TV plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin LIVE TV versions = 1.2...

CVE-2025-28884

Cross-Site Request Forgery CSRF vulnerability in Rajesh Kumar WP Bulk Post Duplicator wp-bulk-post-duplicator allows Cross Site Request Forgery.This issue affects WP Bulk Post Duplicator: from n/a through = 1.2...

CVE-2025-28884 WordPress WP Bulk Post Duplicator plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rajesh Kumar WP Bulk Post Duplicator wp-bulk-post-duplicator allows Cross Site Request Forgery.This issue affects WP Bulk Post Duplicator: from n/a through = 1.2...

CVE-2025-28884

CVE-2025-28884 is a CSRF vulnerability in the WordPress plugin WP Bulk Post Duplicator, affecting versions up to 1.2. Public data confirms the issue exists but does not provide exploit details. The CVSS v3.1 base score is 4.3 (Medium), with impact limited to integrity and no confidentiality/avail...

VulnCheck KEV: CVE-2024-11303

The pathname of the root directory to a Restricted Directory 'Path Traversal' vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601: through 1.2...

WordPress plugin WP Bulk Post Duplicato 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

com.xwiki.confluencepro:application-confluence-migrator-pro-ui Remote Code Execution via unescaped translations

Impact A user that doesn't have programming rights can execute arbitrary code when creating a page using the Migration Page template. A possible attack vector is the following: Create a page and add the following content: confluencepro.job.question.advanced.input=/html async async="true"...

WordPress Download HTML TinyMCE Button plugin <= 1.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Download HTML TinyMCE Button versions = 1.2...