Recent Advisories

Severity ID Title Vendor Product Date Type
Unknown ADV-9020

Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting

CVE Details Basic Information Title Wonder Slider Lite & Wonder Slider

N/A N/A NEWS
Unknown ADV-9019

Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVE Details Basic Information Title Advanced iFrame

N/A N/A NEWS
Unknown ADV-9018

WoodMart – Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation

CVE Details Basic Information Title WoodMart – Multipurpose WooCommerce Theme

N/A N/A NEWS
Unknown ADV-9017

TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation

CVE Details Basic Information Title TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation Type cve Published 2025-07-26T07:02:07....

N/A N/A NEWS
Unknown ADV-9016

MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation

CVE Details Basic Information Title MinimogWP – The High Converting eCommerce WordPress Theme

N/A N/A NEWS
Unknown ADV-9013

MelaPress Login Security 2.1.0 – 2.1.1 – Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function

CVE Details Basic Information Title MelaPress Login Security 2.1.0 – 2.1.1 – Authentication Bypass to Privilege Escalation via get_vali...

N/A N/A NEWS
Unknown ADV-9012

Tenda AC10 RequestsProcessLaid heap-based overflow

CVE Details Basic Information Title Tenda AC10 RequestsProcessLaid heap-based overflow Type cve Published 2025-07-26T04:32:10.022Z Modified 2025-07...

N/A N/A NEWS
Unknown ADV-9011

PHPGurukul Local Services Search Engine Management System changeimage.php sql injection

CVE Details Basic Information Title PHPGurukul Local Services Search Engine Management System changeimage.php sql injection Type cve Published 2025...

N/A N/A NEWS
Unknown ADV-9010

DbGate allows for File Traversal via file parameter

CVE Details Basic Information Title DbGate allows for File Traversal via file parameter Type cve Published 2025-07-26T03:27:05.690Z Modified 2025-0...

N/A N/A NEWS
Unknown ADV-9009

HAX CMS Backend Lacks Comprehensive Authorization Checks

CVE Details Basic Information Title HAX CMS Backend Lacks Comprehensive Authorization Checks Type cve Published 2025-07-26T03:27:34.305Z Modified 2...

N/A N/A NEWS