CVE-2025-57932 WordPress PowerFolio Plugin <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Diego Pereira PowerFolio portfolio-elementor allows Stored XSS.This issue affects PowerFolio: from n/a through = 3.2.1...

PT-2025-38991

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CashBill CashBill.pl - Płatności WooCommerce allows Stored XSS. This issue affects CashBill.pl - Płatności WooCommerce: from n/a through 3.2.1...

PT-2025-38782

Name of the Vulnerable Software and Affected Versions PowerFolio versions through 3.2.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This can potentially allow an attacker to inject...

Linux Distros Unpatched Vulnerability : CVE-2024-1713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user who can create objects in a database with plv8 3.2.1 installed is able to cause deferred triggers to execute as the Superuser during autovacuum...

CVE-2025-58818

CVE-2025-58818 is a CSRF vulnerability in the WordPress plugin Developer Tools Blocker (SwiftNinjaPro) affecting versions up to 3.2.1. Technical details across sources confirm CSRF as the root cause and that exploitation could enable actions on behalf of authenticated users. Mitigation: update to...

CVE-2025-58818 WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in SwiftNinjaPro Developer Tools Blocker swiftninjapro-inspect-element-console-blocker allows Cross Site Request Forgery.This issue affects Developer Tools Blocker: from n/a through = 3.2.1...

WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Developer Tools Blocker versions = 3.2.1...

PT-2025-36157

Name of the Vulnerable Software and Affected Versions: SwiftNinjaPro Developer Tools Blocker versions through 3.2.1 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This allows attackers to perform actions on behalf of an authenticated user without their knowledge...

WordPress plugin Developer Tools Blocker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF

Critical XXE in Apache Tika tika-parser-pdf-module in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be able to read sensitive data or trigger malicious requests to...

CVE-2025-53562

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbguniversalvideoplayeraddonvisualcomposer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery...

CVE-2025-48170 WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through 3.2.1...

CVE-2025-53559

CVE-2025-53559 : Reflected Cross-Site Scripting in the LambertGroup Universal Video Player - Addon for WPBakery Page Builder (versions

CVE-2025-53562 WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbguniversalvideoplayeraddonvisualcomposer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery...

CVE-2025-53562 WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbguniversalvideoplayeraddonvisualcomposer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery...

PT-2025-33926 · WordPress · Lambertgroup Universal Video Player - Addon For Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: LambertGroup Universal Video Player - Addon for WPBakery Page Builder versions through 3.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Reflected Cross-site...

CVE-2025-49052

Missing Authorization vulnerability in Dariolee Netease Music netease-music allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netease Music: from n/a through = 3.2.1...

CVE-2025-49052 WordPress Netease Music plugin <= 3.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dariolee Netease Music allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Netease Music: from n/a through 3.2.1...

PT-2025-33183 · Unknown · Dariolee Netease Music

Name of the Vulnerable Software and Affected Versions: Dariolee Netease Music versions n/a through 3.2.1 Description: A missing authorization flaw exists in Dariolee Netease Music due to incorrectly configured access control security levels. Recommendations: Update to a version later than 3.2.1...

CVE-2025-53540 CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Several OTA update examples and the HTTPUpdateServer implementation are vulnerable to Cross-Site Request Forgery CSRF. The update endpoints accept POST requests for firmware uploa...