CVE-2024-32124 – FortiIsolator Improper Access Control Logging Vulnerability
CVE ID : CVE-2024-32124 Published : July 18, 2025, 8:15 a.m. | 1 hour, 24 minutes ago Description : An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request. Severity: 4.3 | MEDIUM Visit the […]
CVE-2024-27779 – FortiSandbox FortiIsolator Insufficient Session Expiration Vulnerability
CVE ID : CVE-2024-27779 Published : July 18, 2025, 8:15 a.m. | 1 hour, 24 minutes ago Description : An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, […]
BIND 9 Vulnerabilities Expose Organizations to Cache Poisoning and DoS Attacks
BIND 9 Vulnerabilities Expose Organizations to Cache Poisoning and DoS Attacks Two critical vulnerabilities in the BIND 9 DNS resolver software are affecting organizations worldwide, with potential cache poisoning and denial-of-service attacks. The vulnerabilities, identified as … Read more Published Date: Jul 18, 2025 (3 hours, 20 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-40777 […]
New Cisco Bugs Rated CVSS 10.0, Patch Immediately
New Cisco Bugs Rated CVSS 10.0, Patch Immediately Cisco has issued a new security advisory warning of newly discovered vulnerabilities in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), revealing serious security flaw … Read more Published Date: Jul 18, 2025 (1 hour, 33 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-20337 […]
CVE-2025-7772 – “WordPress Malware Removal Plugin Arbitrary File Read Vulnerability”
CVE ID : CVE-2025-7772 Published : July 18, 2025, 7:15 a.m. | 19 minutes ago Description : The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 16.8 via the wpmr_inspect_file() function due to a missing capability check. This […]
CVE-2025-7438 – MasterStudy LMS Pro WordPress Arbitrary File Upload Vulnerability
CVE ID : CVE-2025-7438 Published : July 18, 2025, 7:15 a.m. | 19 minutes ago Description : The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the ‘install_and_activate_plugin’ function in all versions up to, and including, 4.7.9. This makes it possible for authenticated attackers, with […]
CVE-2025-7643 – WordPress Attachment Manager Remote File Deletion Vulnerability
CVE ID : CVE-2025-7643 Published : July 18, 2025, 6:15 a.m. | 1 hour, 19 minutes ago Description : The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_actions() function in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to […]
CVE-2025-6726 – WordPress Block Editor Gallery Slider Unauthenticated Post Meta Modification Vulnerability
CVE ID : CVE-2025-6726 Published : July 18, 2025, 6:15 a.m. | 1 hour, 19 minutes ago Description : The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classic_gallery_slider_options() function in all versions up to, and including, 1.1.1. This makes it possible for […]
CVE-2025-6719 – WordPress Terms Descriptions Stored Cross-Site Scripting Vulnerability
CVE ID : CVE-2025-6719 Published : July 18, 2025, 6:15 a.m. | 1 hour, 19 minutes ago Description : The Terms descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, […]
CVE-2025-6718 – B1.lt WordPress SQL Injection
CVE ID : CVE-2025-6718 Published : July 18, 2025, 6:15 a.m. | 1 hour, 19 minutes ago Description : The B1.lt plugin for WordPress is vulnerable to SQL Injection due to a missing capability check on the b1_run_query AJAX action in all versions up to, and including, 2.2.56. This makes it possible for authenticated attackers, with Subscriber-level […]