CVE Vulnerability Catalog

NVIDIA TRT-LLM contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. Successful exploitation might lead to denial of service.

Deserialization vulnerability and unsafe serialized handle in NVIDIA TRT-LLM. Can lead to code execution, data tampering, and information disclosure.

Missing capability check in the get_content_editor function of the Xpro Addons plugin for WordPress allows unauthenticated attackers to create published Xpro templates.

The Infility Global plugin for WordPress is vulnerable to SQL injection via the 'orderby' and 'order' parameters in versions up to and including 2.15.16. This is due to insufficient escaping and lack of proper SQL query preparation in the show_control_data::post_list() function. Authenticated attackers with Subscriber-level access or higher can append additional SQL queries to extract sensitive database information.

The Correct Prices plugin for WordPress up to version 1.0 contains a reflected XSS vulnerability via the $_SERVER['PHP_SELF'] variable. The correct_pages_page() function echoes this variable into a form's action attribute without sanitization, allowing an unauthenticated attacker to inject arbitrary JavaScript.

The SponsorMe plugin for WordPress up to version 0.5.2 is vulnerable to Reflected Cross-Site Scripting via the PHP_SELF parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts that execute if a user clicks a crafted link.

The LJ comments import: reloaded plugin for WordPress up to version 0.97.1 is vulnerable to Reflected Cross-Site Scripting via the PHP_SELF parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts that execute if a user clicks a crafted link.

The TypeSquare Webfonts for ConoHa plugin for WordPress up to version 2.0.4 is vulnerable to authorization bypass. It does not properly verify that a user is authorized to perform an action, allowing authenticated attackers with Subscriber-level access or higher to modify the plugin's site-wide font settings, including typesquare_auth, show_post_form, and typesquare_fonttheme, by submitting a POST request to any wp-admin page. For fontThemeUseType values 1 and 3, no nonce verification is performed either, making those branches additionally exploitable via CSRF.

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.0. Missing nonce validation on the 'rybb_api_settings' page allows unauthenticated attackers to reset plugin settings via a forged request, provided they trick a site administrator into clicking a link.

The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 2.0.5. Missing nonce validation on the options page allows unauthenticated attackers to change the site's active theme by modifying the jbct_theme option via a forged request, provided they trick a site administrator into clicking a link.

The WordPress plugin BLOGCHAT Chat System up to version 1.3.6.3 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on a function. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into clicking a link.

Missing nonce validation in Amazon Scraper plugin for WordPress (up to 1.1) allows CSRF attacks, enabling unauthenticated attackers to update settings and inject malicious scripts.

The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to and including 1.2.0. Missing nonce validation in the gc_crud() function for the delete action via GET request allows unauthenticated attackers to delete arbitrary game catalog entries (including associated WordPress posts) via a forged request, provided they trick an administrator into clicking a link.

Stored XSS vulnerability in the 'facesofusers' shortcode of the Faces of Users plugin for WordPress allows authenticated attackers (Contributor-level and above) to inject arbitrary web scripts.

The Read More & Accordion plugin for WordPress up to version 3.5.7 is vulnerable to time-based blind SQL injection via the 'orderby' parameter. This is due to the use of esc_sql() without quotes in an ORDER BY clause, allowing authenticated attackers with administrator access (or appropriate role) to inject SQL expressions like (SELECT SLEEP(5)).

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all versions up to, and including, 1.01. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrator into performing an action such as clicking on a link.

Stored XSS vulnerability in shortcodes of the Logo Manager For Enamad plugin for WordPress allows authenticated attackers (Contributor-level and above) to inject arbitrary web scripts via the 'title' attribute.

The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.2. Missing nonce validation in the bigfishgames_syndicate_submenu() function allows unauthenticated attackers to reset and update plugin settings via a forged request, provided they trick an administrator into clicking a link.

The Anomify AI plugin for WordPress up to 0.3.6 is vulnerable to Stored XSS via the 'anomify_api_key' parameter. sanitize_text_field() strips HTML but does not encode double quotes, and the value is echoed into an HTML attribute without esc_attr().

Missing nonce verification in Bottom Bar plugin for WordPress (up to 0.1.7) allows CSRF attacks, enabling unauthenticated attackers to update plugin configuration options.