WordPress plugin SureForms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-32499

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Logo Showcase Ultimate logo-showcase-ultimate allows PHP Local File Inclusion.This issue affects Logo Showcase Ultimate: from n/a through = 1.4.4...

CVE-2025-32499

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Logo Showcase Ultimate logo-showcase-ultimate allows PHP Local File Inclusion.This issue affects Logo Showcase Ultimate: from n/a through = 1.4.4...

CVE-2025-30820

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n/a through = 1.4.4...

WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin WishSuite versions = 1.4.4...

CVE-2025-30820

CVE-2025-30820 (WishSuite) : WordPress WishSuite vulnerability exists due to Improper Control of Filename for Include/Require in PHP (PHP Local File Inclusion). The Wordfence Vulnerability details show this affects WishSuite versions up to 1.4.4 and requires authentication with at least Contribut...

WordPress plugin WishSuite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2025-28903 WordPress Driving Directions plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hectorgarrofe Driving Directions ddirections allows Reflected XSS.This issue affects Driving Directions: from n/a through = 1.4.4...

CVE-2025-28903

CVE-2025-28903 is a reflected XSS in Driving Directions (WordPress plugin). The entry indicates improper input neutralization during web page generation, enabling reflected XSS. Reported as affecting Driving Directions: from n/a through 1.4.4, with CVSS v3.1 base score 7.1 (HIGH) and network atta...

WordPress plugin Driving Directions 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

WordPress Driving Directions plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Driving Directions versions = 1.4.4...

PT-2025-7654 · WordPress · Accept Donations With Paypal & Stripe

Name of the Vulnerable Software and Affected Versions: Accept Donations with PayPal & Stripe plugin for WordPress versions up to, and including, 1.4.4 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing...

CVE-2024-10078

The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access an...

openSUSE 15 Security Update : dante (openSUSE-SU-2025:0030-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0030-1 advisory. - Update to version 1.4.4 Fixed incorrect access control for some sockd.conf configurations involving socksmethod boo1234688, CVE-2024-54662. Tenable has...

OPENSUSE-SU-2025:0030-1 Security update for dante

This update for dante fixes the following issues: - Update to version 1.4.4 Fixed incorrect access control for some sockd.conf configurations involving socksmethod boo1234688, CVE-2024-54662...

Security update for dante (moderate)

openSUSE Security Update: Security update for dante Announcement ID: openSUSE-SU-2025:0030-1 Rating: moderate References: 1234688 Cross-References: CVE-2024-54662 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2024-12071

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletenetworkpost function in all versions up to, and including, 1.4.4. This makes it possible for...

CVE-2024-12071 Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletenetworkpost function in all versions up to, and including, 1.4.4. This makes it possible for...

PT-2025-1740 · WordPress · Evergreen Content Poster

Name of the Vulnerable Software and Affected Versions: The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress versions up to, and including, 1.4.4 Description: The issue is related to unauthorized loss of data due to a missing capability check...

WordPress Evergreen Content Poster plugin <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin Evergreen Content Poster versions = 1.4.4...