CVE-2025-32644

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through = 1.1.9...

CVE-2025-31388

Cross-Site Request Forgery CSRF vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through = 0.4...

CVE-2025-32644

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through = 1.1.9...

CVE-2025-31388

Cross-Site Request Forgery CSRF vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through = 0.4...

CVE-2025-31388 WordPress The World plugin <= 0.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through = 0.4...

CVE-2025-31388

CVE-2025-31388: CSRF to Stored XSS in The World WordPress plugin is documented with affected version range (n/a–0.4) and a CVSS v3.1 base score of 7.1. Connected sources do not provide a product fix or exploit details; no remediation is specified in the provided documents.

CVE-2025-32644 WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through = 1.1.9...

CVE-2025-32644

IP2Location World Clock (WordPress plugin) contains a CSRF to Stored XSS vulnerability, affecting versions up to 1.1.9. The CVE entry lists CVE-2025-32644 with a CVSSv3.1 base score of 7.1 (HIGH) and a Network attack vector, requiring user interaction. The vulnerability affects the plugin as depl...

WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin IP2Location World Clock versions = 1.1.9...

WordPress plugin The World 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

PT-2025-15811 · Ip2Location · Ip2Location Ip2Location World Clock

Name of the Vulnerable Software and Affected Versions: ip2location IP2Location World Clock versions 1.1.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing...

WordPress plugin IP2Location World Clock 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Preview the Action: Two New Sessions Available Before Take Command 2025

Take Command 2025 is packed with insights from cybersecurity experts, threat intelligence leaders, and hands-on practitioners. But you don’t have to wait until April 9 to start learning. Two exclusive sessions are now available on-demand — giving you early access to critical content designed to...

Inside the Mind of the Attacker: A Conversation with Raj Samani

With Take Command 2025 just around the corner, we sat down with Raj Samani, Chief Scientist at Rapid7, for a preview of his upcoming session: Inside the Mind of an Attacker: Navigating the Threat Horizon. Raj will be joined by Trent Teyema, Founder and President at CSG Strategies and former head ...

The vulnerability of Siemens Teamcenter Visualization’s lifecycle management system and Siemens Tecnomatix Plant Simulation’s software environment for modeling systems and processes lies in the reading of data beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of Siemens Teamcenter Visualization’s lifecycle management system and Siemens Tecnomatix Plant Simulation’s simulation software environment is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary...

Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Protection Mechanism Failure in 7-Zip

🚀 7-Zip-CVE-2025-0411-POC Repository Welcome to the official...

Security Bulletin: Vulnerability in OpenPrinting CUPS affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.

Summary Potential vulnerability in OpenPrinting CUPS has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability have been addressed. Refer to details for additional information...

SUSE CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...

CVE-2025-27591

A flaw was found in the Below service. This vulnerability allows local, unprivileged users to escalate to root privileges via symlink attacks exploiting a world-writable directory at /var/log/below. Mitigation Mitigation for this issue is either not available or the currently available options do...