logo_clicknbuy.png

Day: 2 August 2025

CVE-2025-8466 – Code-projects Online Farm System SQL Injection

The following table lists the changes that have been made to the CVE-2025-8466 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Aug. 02, 2025 Action […]

CVE-2025-8399 – WordPress Mmm Unity Loader Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8399 Published : Aug. 2, 2025, 9:15 a.m. | 35 minutes ago Description : The Mmm Unity Loader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘attributes’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated […]

CVE-2025-8391 – WordPress Magic Edge Lite Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8391 Published : Aug. 2, 2025, 9:15 a.m. | 35 minutes ago Description : The Magic Edge – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘height’ parameter in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for […]

CVE-2025-8317 – WordPress Custom Word Cloud Stored Cross-Site Scripting

CVE ID : CVE-2025-8317 Published : Aug. 2, 2025, 8:15 a.m. | 1 hour, 35 minutes ago Description : The Custom Word Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘angle’ parameter in all versions up to, and including, 0.3 due to insufficient input sanitization and output escaping. This makes it possible for […]

CVE-2025-8212 – Elementor Medical Addon Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8212 Published : Aug. 2, 2025, 8:15 a.m. | 1 hour, 35 minutes ago Description : The Medical Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s Typewriter widget in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping on user supplied […]

CVE-2025-6754 – “WordPress SEO Metrics Privilege Escalation”

CVE ID : CVE-2025-6754 Published : Aug. 2, 2025, 8:15 a.m. | 1 hour, 35 minutes ago Description : The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both the seo_metrics_handle_connect_button_click() AJAX handler and the seo_metrics_handle_custom_endpoint() function in versions 1.0.5 through 1.0.15. Because the AJAX action only verifies a […]