High - CVE-2025-6459 - The Ads Pro Plugin - Multi-Purpose WordPress...
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.89. This is due to missing...
Medium - CVE-2025-6686 - The Magic Buttons for Elementor plugin for...
The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up to, and including, 1.0 due to...
Medium - CVE-2025-6687 - The Magic Buttons for Elementor plugin for...
The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up to, and including, 1.0 due to...
NA - CVE-2025-52462 - Cross-site scripting vulnerability exists in...
Cross-site scripting vulnerability exists in Active! mail 6 BuildInfo: 6.30.01004145 to 6.60.06008562. If this vulnerability is exploited, an arbitrary script may be executed on the logged-in...
NA - CVE-2025-52463 - Cross-site request forgery vulnerability exists...
Cross-site request forgery vulnerability exists in Active! mail 6 BuildInfo: 6.60.06008562 and earlier. If this vulnerability is exploited, unintended E-mail may be sent when a user accesses a...
High - CVE-2025-6463 - The Forminator Forms – Contact Form, Payment...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the...
High - CVE-2025-6464 - The Forminator Forms – Contact Form, Payment...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.44.2 via deserialization...
Critical - CVE-2024-13786 - The education theme for WordPress is vulnerable...
The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the...
Medium - CVE-2025-6017 - A flaw was found in Red Hat Advanced Cluster...
A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view...
NA - CVE-2025-24328 - Sending a crafted SOAP "set" operation message...
Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OAM service...