PT-2025-31373 · Tesla · Tesla Wall Connector

Name of the Vulnerable Software and Affected Versions: Tesla Wall Connector affected versions not specified Description: This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to...

(Pwn2Own) Tesla Wall Connector Firmware Downgrade Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware upgrade feature. The issue results from the lack o...

(Pwn2Own) Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the HTTP Content-Length header. The issue results...

PT-2025-31372 · Tesla · Tesla Wall Connector

Name of the Vulnerable Software and Affected Versions: Tesla Wall Connector versions 24.44.1 Tesla Wall Connector version 24.44.3 Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Wall Connector devices without authentication. The issue...

WordPress Image Wall Cross-Site Scripting Vulnerability

WordPress Image Wall is a WordPress plugin that allows users to browse blog posts or page content via images. WordPress Image Wall suffers from a cross-site scripting vulnerability that stems from improper input neutralization, which can be exploited by an attacker to execute a phishing attack by...

CVE-2025-48156

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Stored XSS.This issue affects Image Wall: from n/a through = 3.1...

CVE-2025-48156

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Stored XSS.This issue affects Image Wall: from n/a through = 3.1...

CVE-2025-48156 WordPress Image Wall plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Stored XSS.This issue affects Image Wall: from n/a through = 3.1...

CVE-2025-48156

CVE-2025-48156 is a stored Cross-Site Scripting vulnerability in the WordPress plugin Parakoos Image Wall (Image Wall) up to version 3.1. The issue arises from improper neutralization of input during web page generation. Affected software: Image Wall (WordPress). Impact, per available data, is a ...

CVE-2025-48156 WordPress Image Wall plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall allows Stored XSS. This issue affects Image Wall: from n/a through 3.1...

PT-2025-29724 · Unknown · Parakoos Image Wall

Name of the Vulnerable Software and Affected Versions: Parakoos Image Wall versions through 3.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Cross-site Scripting condition. This allows for Stored XSS attacks. Recommendations...

WordPress plugin Image Wall 跨站脚本漏洞

WordPress Image Wall is a WordPress plugin that allows users to browse blog posts or page content via images. WordPress Image Wall suffers from a cross-site scripting vulnerability that stems from improper input neutralization, which can be exploited by an attacker to execute a phishing attack by...

WordPress GC Social Wall Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress GC Social Wall, which stems from insufficient input cleanup and output escaping, and can be exploited by an attacke...

CVE-2025-28968

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Prelovac WP Wall wp-wall allows Reflected XSS.This issue affects WP Wall: from n/a through = 1.7.3...

CVE-2025-28968

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Prelovac WP Wall wp-wall allows Reflected XSS.This issue affects WP Wall: from n/a through = 1.7.3...

CVE-2025-28968 WordPress WP Wall plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Prelovac WP Wall wp-wall allows Reflected XSS.This issue affects WP Wall: from n/a through = 1.7.3...

CVE-2025-28968

CVE-2025-28968 refers to a Reflected XSS in the WordPress WP Wall plugin, affecting versions

CVE-2025-28968 WordPress WP Wall plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Prelovac WP Wall wp-wall allows Reflected XSS.This issue affects WP Wall: from n/a through = 1.7.3...

PT-2025-27901 · Vladimir Prelovac · Wp Wall

Name of the Vulnerable Software and Affected Versions: Vladimir Prelovac WP Wall versions 1.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacker...

WordPress plugin WP Wall 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...