Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-59002 | 7.7 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SeaTheme BM Content Builder bm-builder allows Path Traversal.This issue affects BM Content Builder: from n/a through < 3.16.3.3. | 2026-10-11 20:10:00 | 2025-09-26 09:15:33 |
| CVE-2025-58919 | 5.3 | Missing Authorization vulnerability in guihom Wide Banner wide-banner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wide Banner: from n/a through <= 1.0.4. | 2026-10-11 20:10:00 | 2025-09-26 09:15:32 |
| CVE-2025-58917 | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Verwymeren Quantities and Units for WooCommerce quantities-and-units-for-woocommerce allows Stored XSS.This issue affects Quantities and Units | 2026-10-11 20:10:00 | 2025-09-26 09:15:32 |
| CVE-2025-58914 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in Di Themes Di Themes Demo Site Importer di-themes-demo-site-importer allows Cross Site Request Forgery.This issue affects Di Themes Demo Site Importer: from n/a through <= 1.2. | 2026-10-11 20:10:00 | 2025-09-26 09:15:32 |
| CVE-2025-4957 | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Reflected XSS.This issue affects ProfileGrid : from n/a through <= 5. | 2026-10-11 20:10:00 | 2025-09-26 09:15:32 |
| CVE-2025-48326 | 6.5 | Missing Authorization vulnerability in Acclectic Media Acclectic Media Organizer acclectic-media-organizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acclectic Media Organizer: from n/a through <= 1.4. | 2026-10-11 20:10:00 | 2025-09-26 09:15:32 |
| CVE-2025-48107 | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in undsgn Uncode uncode allows Reflected XSS.This issue affects Uncode: from n/a through < 2.9.4.4. | 2026-10-11 20:10:00 | 2025-09-26 09:15:32 |
| CVE-2025-27006 | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeplugs Authorsy authorsy allows Stored XSS.This issue affects Authorsy: from n/a through <= 1.0.5. | 2026-10-11 20:10:00 | 2025-09-26 09:15:31 |
| CVE-2025-54831 | 6.5 | Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values | 2026-10-11 20:10:00 | 2025-09-26 08:15:38 |
| CVE-2025-10490 | 4.4 | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authe | 2026-10-11 20:10:00 | 2025-09-26 07:15:41 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13102
Zapisa po stranici: