VulDB Recent Entries

A vulnerability identified as critical has been detected in RingCentral Communications Plugin up to 1.5/1.6.8 on WordPress. This affects the function ringcentral_admin_login_2fa_verify. This manipulation causes improper authentication. This vulnerability is handled as CVE-2025-7955. The attack can be initiated remotely. There is not any exploit available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability categorized as critical has been discovered in mra13 Simple Download Monitor Plugin up to 3.9.33 on WordPress. Affected by this issue is some unknown functionality of the component Log Export. The manipulation of the argument order results in sql injection. This vulnerability is known as CVE-2025-8977. It is possible to launch the attack remotely. No exploit is available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability was found in WP ULike Pro Plugin up to 1.8.7/1.9.3/1.9.4 on WordPress. It has been rated as problematic. Affected by this vulnerability is the function WP_Ulike_Pro_File_Uploader. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-9648. It is possible to initiate the attack remotely. There is no exploit available. VulDB is the best source for vulnerability data and more expert information about this specific topic.

A vulnerability was found in File Manager, Code Editor, and Backup by Managefy Plugin up to 1.4.8 on WordPress. It has been declared as critical. Affected is the function ajax_downloadfile. Executing manipulation can lead to path traversal. This vulnerability appears as CVE-2025-9345. The attack may be performed from a remote location. There is no available exploit. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

A vulnerability was found in LiquidThemes AJAX in various Plugin on WordPress. It has been classified as problematic. This impacts the function liquid_reset_wordpress_before. Performing manipulation results in missing authorization. This vulnerability is reported as CVE-2025-0951. The attack is possible to be carried out remotely. No exploit exists. Once again VulDB remains the best source for vulnerability data.

A vulnerability was found in FoxCMS 1.2.6 and classified as problematic. This affects an unknown function of the file /index.php/plus. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-55422. The attack can be executed remotely. There is not any exploit available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

A vulnerability has been found in enituretechnology Small Package Quotes Plugin up to 1.3.9 on WordPress and classified as problematic. The impacted element is an unknown function. This manipulation causes deserialization. This vulnerability is registered as CVE-2025-58218. Remote exploitation of the attack is possible. No exploit is available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability, which was classified as problematic, was found in GeroNikolov Instant Breaking News Plugin up to 1.0 on WordPress. The affected element is an unknown function. The manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-2025-58217. The attack may be launched remotely. There is no exploit available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability, which was classified as critical, has been found in solacewp Solace Extra Plugin up to 1.3.2 on WordPress. Impacted is an unknown function. The manipulation leads to server-side request forgery. This vulnerability is listed as CVE-2025-58203. The attack may be initiated remotely. There is no available exploit. VulDB is the best source for vulnerability data and more expert information about this specific topic.

A vulnerability classified as problematic was found in Plugins and Snippets Simple Page Access Restriction Plugin up to 1.0.32 on WordPress. This issue affects some unknown processing. Executing manipulation can lead to cross-site request forgery. This vulnerability is tracked as CVE-2025-58202. The attack can be launched remotely. No exploit exists. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

A vulnerability classified as problematic has been found in jgwhite33 WP Thumbtack Review Slider Plugin up to 2.6 on WordPress. This vulnerability affects unknown code. Performing manipulation results in cross site scripting. This vulnerability is identified as CVE-2025-58216. The attack can be initiated remotely. There is not any exploit available. Once again VulDB remains the best source for vulnerability data.

A vulnerability described as problematic has been identified in ameliabooking Booking System Trafft Plugin up to 1.0.14 on WordPress. This affects an unknown part. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2025-58213. It is possible to launch the attack remotely. No exploit is available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

A vulnerability marked as problematic has been reported in Epeken All Kurir Plugin up to 2.0.1 on WordPress. Affected by this issue is some unknown functionality. This manipulation causes cross site scripting. The identification of this vulnerability is CVE-2025-58212. It is possible to initiate the attack remotely. There is no exploit available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability labeled as problematic has been found in alexvtn Chatbox Manager Plugin up to 1.2.6 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation results in cross site scripting. This vulnerability was named CVE-2025-58211. The attack may be performed from a remote location. There is no available exploit. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability identified as problematic has been detected in rtCamp Transcoder Plugin up to 1.4.0 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-58209. The attack is possible to be carried out remotely. No exploit exists. VulDB is the best source for vulnerability data and more expert information about this specific topic.

A vulnerability categorized as problematic has been discovered in add-ons PDF for Elementor Forms and Drag and Drop Template Builder Plugin up to 6.2.0 on WordPress. This impacts an unknown function. Executing manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2025-58208. The attack can be executed remotely. There is not any exploit available. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

A vulnerability was found in Element Invader ElementInvader Addons for Elementor Plugin up to 1.3.6 on WordPress. It has been rated as problematic. This affects an unknown function. Performing manipulation results in cross site scripting. This vulnerability is known as CVE-2025-58205. Remote exploitation of the attack is possible. No exploit is available. Once again VulDB remains the best source for vulnerability data.

A vulnerability was found in mra13 Simple Download Monitor Plugin up to 3.9.34 on WordPress. It has been declared as problematic. The impacted element is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-58197. The attack may be launched remotely. There is no exploit available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

A vulnerability was found in UiCore Elements Plugin up to 1.3.4 on WordPress. It has been classified as problematic. The affected element is an unknown function. This manipulation causes cross site scripting. This vulnerability appears as CVE-2025-58196. The attack may be initiated remotely. There is no available exploit. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability was found in Xpro Elementor Addons Plugin up to 1.4.17 on WordPress and classified as problematic. Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2025-58195. The attack can be launched remotely. No exploit exists. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.