JLSEC-2026-10 Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of s...

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via pngcreatereadstruct function...

CVE-2025-28164

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via pngcreatereadstruct function...

CVE-2025-28162

CVE-2025-28162 is a memory-related vulnerability in libpng 1.6.43–1.6.46 where a Buffer Overflow via pngimage with AddressSanitizer can cause memory leaks, leading to high memory usage and potential DoS via local access. Affected versions include libpng 1.6.43–1.6.46; the issue is documented acro...

CVE-2025-28164

CVE-2025-28164 is a Buffer Overflow in libpng 1.6.43–1.6.46 that allows a local attacker to cause a denial of service by calling png_create_read_struct(). The connected OSV entries corroborate the impact and affected component, and note the issue is local with low attacker complexity. The descrip...

WordPress Elementor Header & Footer Builder plugin <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Page Title Widget vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.46...

WordPress plugin Elementor Header & Footer Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-16845 · WordPress · Elementor Header & Footer Builder

Name of the Vulnerable Software and Affected Versions: Elementor Header & Footer Builder plugin for WordPress versions up to, and including, 1.6.46 Description: The issue is related to Stored Cross-Site Scripting via the size parameter due to insufficient input sanitization and output escaping...