VulDB Recent Entries

A vulnerability was found in PCRE2Project pcre2 10.45. It has been declared as problematic. This affects the function pcre2_match of the file src/pcre2_match.c. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2025-58050. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability was found in Booking Calendar Plugin up to 10.14.1 on WordPress. It has been classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-9346. The attack can be initiated remotely. There is not any exploit available. VulDB is the best source for vulnerability data and more expert information about this specific topic.

A vulnerability was found in Beaver Builder Plugin up to 2.9.2.1 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. Executing manipulation of the argument fl_builder can lead to cross site scripting. This vulnerability is registered as CVE-2025-8897. It is possible to launch the attack remotely. No exploit is available. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

A vulnerability has been found in UsersWP Plugin up to 1.2.42 on WordPress and classified as problematic. Affected is the function uwp_profile_header of the component Shortcode Handler. Performing manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-9344. It is possible to initiate the attack remotely. There is no exploit available. Once again VulDB remains the best source for vulnerability data.

A vulnerability, which was classified as problematic, was found in Dynamic AJAX Product Filters for WooCommerce Plugin up to 1.3.7 on WordPress. This impacts an unknown function. Such manipulation of the argument className leads to cross site scripting. This vulnerability is listed as CVE-2025-6255. The attack may be performed from a remote location. There is no available exploit. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

A vulnerability, which was classified as problematic, has been found in Dynamic AJAX Product Filters for WooCommerce Plugin up to 1.3.7 on WordPress. This affects an unknown function. This manipulation of the argument Name causes cross site scripting. This vulnerability is tracked as CVE-2025-8073. The attack is possible to be carried out remotely. No exploit exists. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability classified as problematic was found in unitecms Unlimited Elements for Elementor Plugin up to 1.5.148 on WordPress. The impacted element is an unknown function. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2025-8603. The attack can be executed remotely. There is not any exploit available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability classified as problematic has been found in Video Share VOD Plugin up to 2.7.6 on WordPress. The affected element is the function adminExport. The manipulation leads to cross-site request forgery. This vulnerability is referenced as CVE-2025-7812. Remote exploitation of the attack is possible. No exploit is available. VulDB is the best source for vulnerability data and more expert information about this specific topic.

A vulnerability described as problematic has been identified in Pronamic Google Maps Plugin up to 2.4.1 on WordPress. Impacted is an unknown function. Executing manipulation of the argument Description can lead to cross site scripting. The identification of this vulnerability is CVE-2025-9352. The attack may be launched remotely. There is no exploit available. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

A vulnerability marked as problematic has been reported in Xagio SEO Plugin up to 7.1.0.5 on WordPress. This issue affects some unknown processing of the component Back-Up File Handler. Performing manipulation results in information disclosure. This vulnerability was named CVE-2024-13807. The attack may be initiated remotely. There is no available exploit. Once again VulDB remains the best source for vulnerability data.

A vulnerability labeled as problematic has been found in Ajax Search Lite Plugin up to 4.13.1 on WordPress. This vulnerability affects the function ASL_Query of the component AJAX Search Handler. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2025-7956. The attack can be launched remotely. No exploit exists. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

A vulnerability identified as critical has been detected in RingCentral Communications Plugin up to 1.5/1.6.8 on WordPress. This affects the function ringcentral_admin_login_2fa_verify. This manipulation causes improper authentication. This vulnerability is handled as CVE-2025-7955. The attack can be initiated remotely. There is not any exploit available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability categorized as critical has been discovered in mra13 Simple Download Monitor Plugin up to 3.9.33 on WordPress. Affected by this issue is some unknown functionality of the component Log Export. The manipulation of the argument order results in sql injection. This vulnerability is known as CVE-2025-8977. It is possible to launch the attack remotely. No exploit is available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability was found in WP ULike Pro Plugin up to 1.8.7/1.9.3/1.9.4 on WordPress. It has been rated as problematic. Affected by this vulnerability is the function WP_Ulike_Pro_File_Uploader. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-9648. It is possible to initiate the attack remotely. There is no exploit available. VulDB is the best source for vulnerability data and more expert information about this specific topic.

A vulnerability was found in File Manager, Code Editor, and Backup by Managefy Plugin up to 1.4.8 on WordPress. It has been declared as critical. Affected is the function ajax_downloadfile. Executing manipulation can lead to path traversal. This vulnerability appears as CVE-2025-9345. The attack may be performed from a remote location. There is no available exploit. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

A vulnerability was found in LiquidThemes AJAX in various Plugin on WordPress. It has been classified as problematic. This impacts the function liquid_reset_wordpress_before. Performing manipulation results in missing authorization. This vulnerability is reported as CVE-2025-0951. The attack is possible to be carried out remotely. No exploit exists. Once again VulDB remains the best source for vulnerability data.

A vulnerability was found in FoxCMS 1.2.6 and classified as problematic. This affects an unknown function of the file /index.php/plus. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-55422. The attack can be executed remotely. There is not any exploit available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

A vulnerability has been found in enituretechnology Small Package Quotes Plugin up to 1.3.9 on WordPress and classified as problematic. The impacted element is an unknown function. This manipulation causes deserialization. This vulnerability is registered as CVE-2025-58218. Remote exploitation of the attack is possible. No exploit is available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability, which was classified as problematic, was found in GeroNikolov Instant Breaking News Plugin up to 1.0 on WordPress. The affected element is an unknown function. The manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-2025-58217. The attack may be launched remotely. There is no exploit available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability, which was classified as critical, has been found in solacewp Solace Extra Plugin up to 1.3.2 on WordPress. Impacted is an unknown function. The manipulation leads to server-side request forgery. This vulnerability is listed as CVE-2025-58203. The attack may be initiated remotely. There is no available exploit. VulDB is the best source for vulnerability data and more expert information about this specific topic.