CVE Vulnerability Catalog

The KALLYAS theme for WordPress is vulnerable to missing authorization in versions up to and including 4.22.0. This vulnerability may allow unauthorized access to functions or data.

The TheGem (Elementor) plugin for WordPress is vulnerable to Cross-site Scripting up to version 5.10.5. This is due to improper neutralization of input during web page generation.

The TheGem plugin for WordPress is vulnerable to Cross-site Scripting up to version 5.10.5. This is due to improper neutralization of input during web page generation.

Missing Authorization vulnerability in Bux Woocommerce bux-woocommerce allows accessing functionality not properly constrained by ACLs. This issue affects Bux Woocommerce from n/a through <= 1.2.3.

Unrestricted upload of dangerous file types in Atarim visual collaboration plugin up to version 4.2.1. Allows using malicious files.

Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking. This issue affects VikBooking Hotel Booking Engine & PMS from n/a through <= 1.8.2.

Missing Authorization vulnerability in ganddser Jock On Air Now (JOAN) joan allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Jock On Air Now (JOAN) from n/a through <= 6.0.4.

Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects imEvent from n/a through <= 3.4.0.

The Backup and Move plugin (by Gaurav Aggarwal) up to version 0.1 has a Missing Authorization vulnerability. This allows exploiting incorrectly configured access control security levels.

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Google Maps: from n/a through <= 5.8.4.

The Smush Image Compression and Optimization plugin (WPMU DEV) for WordPress is vulnerable to path traversal of type '.../...//' in versions up to, and including, 3.17.0. The vulnerability may allow access to files outside the intended directory.

Podatność CVE-2025-10955 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w oprogramowaniu Netigma firmy Netcad Software Inc. Umożliwia to ataki typu XSS (Cross-site Scripting) poprzez ciągi zapytań HTTP.

The Strong Testimonials plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to and including 3.2.16. This is due to the software allowing users to submit a testimonial in which a value is not properly validated or sanitized prior to being passed to a do_shortcode call. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes if an administrator previews or publishes a crafted testimonial.

The Better Find and Replace plugin for WordPress up to version 1.7.7 lacks a capability check on the rtafar_ajax() function, allowing authenticated attackers with Subscriber-level access to trigger OpenAI API key usage, resulting in quota consumption and potential costs.

The Hubbub Lite plugin for WordPress (versions up to and including 1.36.0) is vulnerable to Reflected Cross-Site Scripting (XSS) via the 'dpsp_list_attention_search' parameter due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary scripts into pages that execute if a user is tricked into clicking a link.

The Blog2Social plugin for WordPress is vulnerable to Server-Side Request Forgery up to version 8.6.0 via the getFullContent() function. Authenticated attackers with Subscriber-level access can make web requests to arbitrary locations originating from the web application, which can be used to query and modify information from internal services.

The Blog2Social plugin for WordPress is vulnerable to limited file upload due to an incorrect capability check on the uploadVideo() function in versions up to and including 8.6.0. Authenticated attackers with Subscriber-level access and above can upload mp4 files to the 'wp-content/uploads/<YYYY>/<MM>/' directory.

The Easy Digital Downloads plugin for WordPress in all versions up to and including 3.5.2 is vulnerable to Order Manipulation due to an order verification bypass. When the POST body includes verification_override=1, verification is unconditionally skipped, allowing an unauthenticated attacker to submit a forged IPN that is treated as verified. A valid PayPal transaction id is required, restricting order manipulation to orders placed by the attacker with a customer account.

The WordPress plugin Easy Email Subscription in all versions up to and including 1.3 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on the show_editsub_page() function. This allows unauthenticated attackers to delete arbitrary subscribers via a forged request if they can trick an administrator into clicking a link.

The Easy Email Subscription plugin for WordPress (all versions up to and including 1.3) is vulnerable to SQL Injection via the 'uid' parameter due to insufficient escaping and lack of preparation on the existing SQL query. An authenticated attacker with Administrator-level access and above can append additional SQL queries to extract sensitive information from the database.