CVE Vulnerability Catalog

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.

The CryptX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `cryptx` shortcode in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Trail Manager plugin for WordPress, in all versions up to and including 1.0.0, is vulnerable to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts that execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Thai Lottery Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `thailottery` shortcode in all versions up to, and including, 2.5. This is due to insufficient input sanitization and output escaping on the user supplied `width` and `height` shortcode attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pto_delete_file AJAX action in all versions up to, and including, 5.1.19. This makes it possible for unauthenticated attackers to delete arbitrary attachments.

The Webcake – Landing Page Builder plugin for WordPress, in all versions up to and including 1.1, is vulnerable to unauthorized modification of data due to a missing capability check on the 'webcake_save_config' AJAX endpoint. This allows authenticated attackers with Subscriber-level access and above to modify the plugin's settings.

The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.

The EPROLO Dropshipping plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wp_ajax_eprolo_delete_tracking and wp_ajax_eprolo_save_tracking_data AJAX endpoints in all versions up to and including 2.3.1. This allows authenticated attackers with Subscriber-level access and above to modify and delete tracking data.

The Hide Categories Or Products On Shop Page plugin for WordPress up to version 1.0.7 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save_data_hcps() function. This allows unauthenticated attackers to update plugin settings if they trick an administrator into clicking a link.

The FitVids for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Time Sheets plugin for WordPress up to version 2.1.3 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on several endpoints. This allows unauthenticated attackers to perform various actions if they trick an administrator into clicking a link.

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

The SSP Debug plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0. This is due to the plugin storing PHP error logs in a predictable, web-accessible location (wp-content/uploads/ssp-debug/ssp-debug.log) without any access controls. This makes it possible for unauthenticated attackers to view sensitive debugging information including full URLs, client IP addresses, User-Agent strings, WordPress user IDs, and internal filesystem paths.

The Norby AI plugin for WordPress up to version 1.0.3 is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the settings update functionality. This allows unauthenticated attackers to update plugin settings and inject malicious scripts if they trick an administrator into clicking a link.

The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the 'ntzcrm_add_new_tag' function in all versions up to and including 2.5. Unauthenticated attackers can create arbitrary membership tags and modify CRM configuration restricted to administrators.

The SurveyFunnel – Survey Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'surveyfunnel_lite_survey' shortcode in all versions up to and including 1.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute whenever a user accesses an injected page.

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, the risk detection mechanism may fail, allowing malicious applications to be installed without proper warning.

A vulnerability in the user interface of Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

A vulnerability has been found in youlaitech youlai-mall versions 1.0.0 and 2.0.0. The function getMemberById in /mall-ums/app-api/v1/members/ is affected. Manipulation of the argument memberId leads to improper access controls. The attack can be carried out remotely and the exploit is public.

A stored XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could execute arbitrary JavaScript code in the management interface of another user.