CVE Vulnerability Catalog

Memory corruption while handling buffer mapping operations in the cryptographic driver.

A memory corruption vulnerability occurs while processing a config call from userspace. Improper handling of input data leads to memory corruption.

Information disclosure while processing a firmware event.

A transient denial of service (DOS) vulnerability occurs while parsing video packets received from the video firmware. Improper packet processing leads to temporary service unavailability.

AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability allowing an unauthenticated attacker within Bluetooth Low Energy (BLE) range to cause a denial of service by repeatedly initiating BLE connections. Sustained attempts interrupt keypad input and force lockout states, preventing legitimate users from unlocking.

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'table_currency' parameter in all versions up to and including 5.1.12 due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Page Keys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_key’ parameter in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Latest Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.5. Missing nonce validation on the settings update handler in admin-page.php allows unauthenticated attackers to modify plugin settings via a forged request, provided they can trick a site administrator into clicking a link.

The Newsletter Email Subscribe plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.4. Incorrect nonce validation on the nels_settings_page function allows unauthenticated attackers to update plugin settings via a forged request, if they can trick an administrator into clicking a link.

The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to unauthorized workflow execution due to missing authorization in the triggerWorkFlow function in all versions up to, and including, 2.21.6. This is due to a logic flaw in the nonce verification where the security check only blocks requests when both the nonce verification fails and the user is logged in. This makes it possible for unauthenticated attackers to replay form workflow executions and trigger all configured integrations including webhooks, email notifications, CRM integrations, and automation platforms via the bitforms_trigger_workflow AJAX action granted they can obtain the entry ID and log IDs from a legitimate form submission response.

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayName' parameter in all versions up to, and including, 5.93.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with customer-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. While it is possible to invoke the AJAX action without authentication, the attacker would need to know a valid form ID, which requires them to place an order. This vulnerability can be exploited by unauthenticated attackers if guest checkout is enabled. However, the form ID still needs to be obtained through placing an order.

The Simple User Meta Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user meta value field in all versions up to and including 1.0.0 due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts that execute when a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The twinklesmtp – Email Service Provider For WordPress plugin is vulnerable to Stored Cross-Site Scripting via plugin's sender settings in all versions up to, and including, 1.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The HBLPAY Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'cusdata' parameter in all versions up to and including 5.0.0 due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute if a user clicks a link.

The Flashcard plugin for WordPress up to version 0.9 is vulnerable to Path Traversal via the 'source' attribute of the 'flashcard' shortcode. Authenticated attackers with contributor level access and above can read arbitrary files on the server, potentially containing sensitive information.

The NS IE Compatibility Fixer plugin for WordPress is vulnerable to CSRF in all versions up to and including 2.1.5. This is due to missing nonce validation on the settings update functionality, allowing unauthenticated attackers to modify plugin settings via a forged request.

The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to limited upload of files with a dangerous type in all versions up to, and including, 1.3.9.2. This is due to the plugin not blocking .phar and .svg files, allowing unauthenticated attackers to upload arbitrary .phar or .svg files containing malicious PHP or JavaScript code. Malicious PHP code can achieve remote code execution via direct file access if the server executes .phar as PHP, and .svg uploads allow Stored XSS under certain circumstances.

The LearnPress – WordPress LMS Plugin is vulnerable to unauthorized file deletion in versions up to and including 4.3.2.2 via the /wp-json/lp/v1/material/{file_id} REST API endpoint. A parameter mismatch between DELETE operation and authorization check allows authenticated attackers with teacher-level access to delete lesson material files uploaded by other teachers.

The My Album Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image titles in all versions up to and including 1.0.4 due to insufficient input sanitization and output escaping on the 'attachment->title' attribute. This allows authenticated attackers with Author-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Key Figures plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the kf_field_figure_default_color_render function in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.