CVE Vulnerability Catalog

The AI Chatbot Free Models plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebyte_chatbot_export_messages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.

In the Linux kernel, the IPVS module had a use-after-free (UAF) vulnerability in __ip_vs_ftp_exit() during netns cleanup. The issue is that __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to UAF. The fix introduces an exiting_module flag that defers ip_vs_ftp unregistration during netns cleanup until all connections are flushed.

Wtyczka Popup builder z funkcjami gamifikacji, wieloetapowych popupów, targetowania na poziomie strony oraz wyzwalaczy WooCommerce dla WordPressa jest podatna na atak typu Server-Side Request Forgery we wszystkich wersjach do i włącznie z 2.1.4. Problem wynika z niewystarczającej walidacji adresów URL dostarczanych przez parametr URL.

The WordPress plugin Real Cookie Banner: GDPR & ePrivacy Cookie Consent up to version 5.2.4 is vulnerable to Server-Side Request Forgery (SSRF) in the REST API endpoint '/scanner/scan-without-login'. Insufficient validation of user-supplied URL allows an authenticated attacker with administrator-level access to make requests to arbitrary locations and modify information from internal services.

The ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_popup_status() function in all versions up to and including 2.3.11. This allows unauthenticated attackers to enable or disable popups.

OpenVPN w wersjach od 2.7_alpha1 do 2.7_beta1 na platformach opartych na POSIX umożliwia zdalnie uwierzytelnionemu serwerowi wstrzykiwanie poleceń powłoki za pomocą zmiennych DNS, gdy używana jest opcja --dns-updown.

The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.13. Insufficient input sanitization and output escaping on user supplied attributes allow authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts.

The Disable Content Editor For Specific Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing nonce validation on template configuration updates, allowing unauthenticated attackers to add or delete template configurations via a forged request if they can trick an administrator into performing an action such as clicking a link.

Wtyczka IndieAuth dla WordPressa jest podatna na atak Cross-Site Request Forgery we wszystkich wersjach do 4.5.4 włącznie. Problem wynika z braku weryfikacji nonce w funkcji `login_form_indieauth()` oraz na punkcie autoryzacji w wp-login.php?action=indieauth.

The VNPAY Payment gateway plugin for WordPress in versions up to and including 1.0.0 is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary web scripts that execute if a user is tricked into clicking a link.

The qnotsquiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'qnotsquiz_custom_start_text' parameter in all versions up to and including 1.0.0 due to insufficient input sanitization and output escaping. An authenticated attacker with administrator-level access can inject arbitrary web scripts into pages that execute when a user visits the injected page.

The NGINX Cache Optimizer plugin for WordPress (all versions up to and including 1.1) is vulnerable to unauthorized modification of data due to a missing capability check on the 'nginxcacheoptimizer-blacklist-update' AJAX action. An authenticated attacker with Subscriber-level access or higher can add URLs to the Exclude URLs From Dynamic Caching setting.

The Multi Item Responsive Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.0 due to missing or incorrect nonce validation on the 'mioptions.php' page. An unauthenticated attacker can update settings and inject malicious web scripts via a forged request if they can trick a site administrator into performing an action such as clicking a link.

Wtyczka AIO Forms – Craft Complex Forms Easily dla WordPressa jest podatna na nieautoryzowane przesyłanie plików z powodu braku walidacji typu pliku w funkcjonalności importu we wszystkich wersjach do i włącznie z 1.3.18. Umożliwia to uwierzytelnionym atakującym z dostępem na poziomie Administratora i wyżej przesyłanie dowolnych plików na serwer dotkniętej witryny.

The Supervisor plugin for WordPress is vulnerable to unauthorized data modification due to missing capability checks in several AJAX functions in all versions up to and including 1.3.2. This allows authenticated attackers with Subscriber-level access and above to update various plugin settings.

Wtyczka Quickcreator – AI Blog Writer dla WordPressa jest podatna na ujawnienie wrażliwych informacji w wersjach od 0.0.9 do 0.1.17 poprzez plik /wp-content/plugins/quickcreator/dupasrala.txt. Umożliwia to nieautoryzowanym atakującym przeglądanie klucza API wtyczki, co pozwala na wykonywanie działań na stronie, takich jak tworzenie nowych postów i wstrzykiwanie ładunków XSS.

The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'process_save_blogs' AJAX endpoint in all versions up to and including 1.0.1. This allows authenticated attackers with Subscriber-level access or higher to trigger an import of all Hubspot data.

W podatności CVE-2025-11253 występuje niewłaściwa neutralizacja specjalnych elementów używanych w poleceniach SQL, co prowadzi do możliwości ataku typu SQL Injection w systemie Netty ERP przed wersją 1.1000.

The Check Plagiarism plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the chk_plag_mine_plugin_wpse10500_admin_action() function in all versions up to and including 2.0. This allows authenticated attackers with Subscriber-level access and above to update the API key.

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'ai_scan_result_remove' function in all versions up to and including 1.0.15. This allows authenticated attackers with Subscriber-level access or above to delete all data in the wp_originalityai_log database table, including post titles, scan scores, credits used, and other data.