NA - CVE-2025-21745 - In the Linux kernel, the following...
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats() iterates over...
NA - CVE-2025-21746 - In the Linux kernel, the following...
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through port an interrupt might come before...
High - CVE-2024-2297 - The Bricks theme for WordPress is vulnerable to...
The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX...
Medium - CVE-2024-6261 - The Image Photo Gallery Final Tiles Grid plugin...
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'FinalTilesGallery' shortcode in all versions up to, and...
High - CVE-2025-1295 - The Templines Elementor Helper Core plugin for...
The Templines Elementor Helper Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.7. This is due to allowing arbitrary user meta updates. This...
NA - CVE-2024-0392 - A Cross-Site Request Forgery (CSRF)...
A Cross-Site Request Forgery (CSRF) vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 due to the absence of CSRF token validation. This flaw allows attackers to...
Medium - CVE-2024-13907 - The Total Upkeep – WordPress Backup Plugin plus...
The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.16.8 via the...
Medium - CVE-2025-1689 - The ThemeMakers PayPal Express Checkout plugin...
The ThemeMakers PayPal Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypal' shortcode in versions up to, and including, 1.1.9 due to...
NA - CVE-2024-5848 - A reflected cross-site scripting (XSS)...
A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper input validation. User-supplied data is directly included in server responses from vulnerable...
High - CVE-2025-1717 - The Login Me Now plugin for WordPress is...
The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication based on an arbitrary transient name in...