CVE-2025-32119 WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CardGate CardGate Payments for WooCommerce cardgate allows Blind SQL Injection.This issue affects CardGate Payments for WooCommerce: from n/a through = 3.2.1...

CodeCanyon Perfex CRM 代码注入漏洞

CodeCanyon Perfex CRM is a self-hosted customer relationship management software from CodeCanyon. A code injection vulnerability exists in CodeCanyon Perfex CRM version 3.2.1, which stems from the fact that incorrect manipulation of the parameter description can lead to cross-site scripting...

CVE-2025-31687

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SpamSpan filter allows Cross-Site Scripting XSS.This issue affects SpamSpan filter: from 0.0.0 before 3.2.1...

CVE-2025-2974

A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely...

Drupal SpamSpan filter 跨站脚本漏洞

Drupal SpamSpan filter is a Drupal community module for spam prevention. A cross-site scripting vulnerability exists in Drupal SpamSpan filter versions prior to 3.2.1, which stems from improper input neutralization and could lead to cross-site scripting attacks...

CodeCanyon Perfex CRM 代码注入漏洞

CodeCanyon Perfex CRM is a self-hosted customer relationship management software from CodeCanyon. A code injection vulnerability exists in CodeCanyon Perfex CRM 3.2.1 and prior versions, which stems from the fact that incorrect manipulation of the parameter content can lead to cross-site scriptin...

WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Traveler versions 3.2.1...

PT-2025-13400 · Unknown · Shinetheme Traveler

Name of the Vulnerable Software and Affected Versions: Shinetheme Traveler versions prior to 3.2.1 Description: The issue is related to the deserialization of untrusted data, which can lead to remote code execution. This is a critical severity issue. It is mentioned that there is a potential for...

CVE-2025-26751 WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood Alphabetic Pagination alphabetic-pagination allows Reflected XSS.This issue affects Alphabetic Pagination: from n/a through = 3.2.1...

PT-2025-7826 · Unknown · Alphabetic Pagination

Name of the Vulnerable Software and Affected Versions: Alphabetic Pagination versions 3.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected...

WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Alphabetic Pagination versions = 3.2.1...

CVE-2024-23320

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

CVE-2024-13658

The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hrSISnextgensearchbox' shortcode in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

WordPress plugin NGG Smart Image Search 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress NGG Smart Image Search plugin <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin NGG Smart Image Search versions = 3.2.1...

CVE-2024-32599

Improper Control of Generation of Code 'Code Injection' vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator.This issue affects WP Dummy Content Generator: from n/a through = 3.2.1...

PT-2025-5770 · Unknown · Php-Parser

Name of the Vulnerable Software and Affected Versions: php-parser version 3.2.1 Description: A prototype pollution in the lib.combine function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For php-parser version 3.2.1, consider disabling the...

PHP Parser 安全漏洞

PHP Parser is a PHP parser written in PHP by Nikita Popov, a personal developer. A security vulnerability exists in PHP Parser version v3.2.1, which stems from the lib.combine function containing a prototype contamination vulnerability...

CVE-2025-23795

CVE-2025-23795 is a stored XSS in the WordPress Easy FAQs plugin (vulnerable through 3.2.1). Exploitation requires authentication (Contributor+). Root cause: improper input handling during web page generation. Current connected sources (Red Hat RH:CVE-2025-23795 and Wordfence vulnerability listin...

PT-2025-1845 · WordPress · Compare Products For Woocommerce

Name of the Vulnerable Software and Affected Versions: Compare Products for WooCommerce plugin for WordPress versions up to, and including, 3.2.1 Description: The issue is related to Reflected Cross-Site Scripting via the s feature parameter due to insufficient input sanitization and output...