2025

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus re

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp –

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profi

The ThemeMakers Stripe Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stripe' short

The Car Dealer Automotive WordPress Theme – Responsive theme for WordPress is vulnerable to arbitrary file deletion due

The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. Th

A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper input validation.

The ThemeMakers PayPal Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypa

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Serv

A Cross-Site Request Forgery (CSRF) vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 d

The Templines Elementor Helper Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, an

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This

Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Nam

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cro

An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed direct

The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includin

The School Management System – SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix hang in nfsd4_shutdown_callback If nfs4_

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read

In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount leak caused by setting SO_BINDTO

In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_

In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlan_vnigroup_init() return value vx

In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix memleak in certai

In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation sy

In the Linux kernel, the following vulnerability has been resolved: workqueue: Put the pwq after detaching the rescuer

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cach

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bail out when failed to load fw in psp_

In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix crash on error in gpiochip_get_ngpios(

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix a oob in orangefs_debug_write I got

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix panic during interface removal Ref

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if l

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap() of persistent ring buf

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subb

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too man

In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If sk

In the Linux kernel, the following vulnerability has been resolved: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: fix potential NULL pointer derefer

In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition ta

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix incorrect autogroup migration detect

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential memory leak in iopf_queue_remo

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclock_miscdev_fops W

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6

In the Linux kernel, the following vulnerability has been resolved: clocksource: Use migrate_disable() to avoid calling