WordPress Marcell theme <= 1.2.14 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Marcell versions = 1.2.14...

CVE-2025-6388

The Spirit Framework plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.2.14. This is due to the customactions function not properly validating a user's identity prior to authenticating them to the site. This makes it possible for unauthenticated...

WordPress plugin Spirit Framework 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

rsyslog librelp buffer overflow vulnerability

rsyslog librelp is a RELP protocol library primarily used for network event logging. A buffer overflow vulnerability exists in x509 certificate detection in rsyslog librelp 1.2.14 and earlier versions. A remote attacker can exploit this vulnerability to execute code with a specially crafted x509...