Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-10745 | 5.3 | The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constan | 2026-10-11 20:10:00 | 2025-09-26 04:15:55 |
| CVE-2025-10377 | 4.3 | The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sd_toggle_logs() function. This makes it possible for unauthenticated a | 2026-10-11 20:10:00 | 2025-09-26 04:15:54 |
| CVE-2025-10173 | 2.7 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to unauthorized access due to an incorrect capability check on the post_save() function in all versions up to, and including, 4.8. | 2026-10-11 20:10:00 | 2025-09-26 04:15:41 |
| CVE-2025-8906 | 6.4 | The Widgets for Tiktok Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trustindex-feed' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping on user | 2026-10-11 20:10:00 | 2025-09-26 02:15:52 |
| CVE-2025-8200 | 6.4 | The Mega Elements – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown Timer widget in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping | 2026-10-11 20:10:00 | 2025-09-26 02:15:52 |
| CVE-2025-10992 | 5.0 | A vulnerability was determined in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. Affected is an unknown function of the file /user/info/lookupList. Executing manipulation can lead to improper authorization. The attack may be perfor | 2026-10-11 20:10:00 | 2025-09-26 02:15:51 |
| CVE-2025-10752 | 4.3 | The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12. This is due to using a predictable state parameter (base64 encoded app name) without any ran | 2026-10-11 20:10:00 | 2025-09-26 02:15:51 |
| CVE-2025-10178 | 6.4 | The CM Business Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cmbd_featured_image' shortcode in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping on use | 2026-10-11 20:10:00 | 2025-09-26 02:15:50 |
| CVE-2025-10989 | 6.5 | A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack | 2026-10-11 20:10:00 | 2025-09-26 01:15:36 |
| CVE-2025-10975 | 6.5 | A vulnerability was found in GuanxingLu vlarl up to 31abc0baf53ef8f5db666a1c882e1ea64def2997. This vulnerability affects the function experiments.robot.bridge.reasoning_server::run_reasoning_server of the file experiments/robot/bridge/reasoning_serve | 2026-10-11 20:10:00 | 2025-09-25 22:15:34 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13310
Zapisa po stranici: