Archive
13 February 2025
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Low 2.7
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functio…
-
Low 3.5
Everest Forms < 3.0.8.1 - Admin+ Stored XSS
The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (fo…
-
Low 3.5
Simple Video Management System <= 1.0.4 - Admin+ Stored XSS
The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability i…
-
Low 3.5
Paid Membership Plugin < 4.15.20 - Admin+ Stored XSS
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Store…
-
Low 3.7
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder th…
-
Low 3.3
An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export funct…
-
Low 3.5
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicI…