2025

Cross-Site Request Forgery (CSRF) vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems tinymce-adva

Cross-Site Request Forgery (CSRF) vulnerability in Complete SEO Page/Post Specific Social Share Buttons pagepost-specifi

Cross-Site Request Forgery (CSRF) vulnerability in mathieuhays Simple Documentation client-documentation allows Stored X

Cross-Site Request Forgery (CSRF) vulnerability in daxiawp DX-auto-publish dx-auto-publish allows Stored XSS.This issue

Cross-Site Request Forgery (CSRF) vulnerability in jesseheap WP PHPList phplist-form-integration allows Cross Site Reque

Cross-Site Request Forgery (CSRF) vulnerability in wibiya Wibiya Toolbar wibiya allows Cross Site Request Forgery.This i

Cross-Site Request Forgery (CSRF) vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affec

Cross-Site Request Forgery (CSRF) vulnerability in Callmeforsox Post Thumbs allows Stored XSS. This issue affects Post

Cross-Site Request Forgery (CSRF) vulnerability in jensmueller Easy Amazon Product Information easy-amazon-product-infor

Cross-Site Request Forgery (CSRF) vulnerability in Shambhu Patnaik RSS Filter rss-filter allows Stored XSS.This issue af

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in badrHan Naver Synd

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sureshdsk Bootstra

Cross-Site Request Forgery (CSRF) vulnerability in Kunal Shivale Global Meta Keyword & Description global-meta-keyword-a

Cross-Site Request Forgery (CSRF) vulnerability in pa1 WP Html Page Sitemap wp-html-page-sitemap allows Stored XSS.This

Cross-Site Request Forgery (CSRF) vulnerability in nagarjunsonti My Login Logout Plugin my-loginlogout allows Stored XSS

Cross-Site Request Forgery (CSRF) vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-u

Cross-Site Request Forgery (CSRF) vulnerability in Pukhraj Suthar Simple Responsive Menu simple-responsive-menu allows S

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use fie

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescap

In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information E

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas version

CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode executi

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includi

CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable wh

CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to st

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when mali

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Inje

Directory Traversal vulnerability in yeqifu carRental v.1.0 allows a remote attacker to obtain sensitive information via

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_

An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) vi

An issue in Nothing Tech Nothing OS v.2.6 allows a local attacker to escalate privileges via the NtBpfService component.

An issue in Zertificon Z1 SecureMail Z1 SecureMail Gateway 4.44.2-7240-debian12 allows a remote attacker to obtain sensi

An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial

Time-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software before version 2.4.1 ma

Use after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may al

Insufficient verification of data authenticity in some Intel(R) DSA software before version 23.4.39 may allow an authent

NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23

Improper access control in some Intel(R) Graphics Driver software installers may allow an authenticated user to potentia

Improper input validation in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow an authent

Improper access control in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalat

Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user

NULL pointer dereference for some Intel(R) MLC software before version v3.11b may allow an authenticated user to potenti

Out-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated us

Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentiall

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged use

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl