Recent Advisories

Severity ID Title Vendor Product Date Type
Unknown ADV-1011

CVE-2025-46238 WordPress List Last Changes <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

Vulnerability Details Basic Information Title CVE-2025-46238 WordPress List Last Changes

N/A N/A NEWS
Unknown ADV-1009

CVE-2025-46239 WordPress Theme Switcha <= 3.4 - Cross Site Scripting (XSS) Vulnerability

Vulnerability Details Basic Information Title CVE-2025-46239 WordPress Theme Switcha

N/A N/A NEWS
Unknown ADV-1008

CVE-2025-46240 WordPress Simple Download Counter <= 2.2 - Cross Site Scripting (XSS) Vulnerability

Vulnerability Details Basic Information Title CVE-2025-46240 WordPress Simple Download Counter

N/A N/A NEWS
Unknown ADV-1004

CVE-2025-46251 WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.3.3 - CSRF to Stored XSS vulnerability

Vulnerability Details Basic Information Title CVE-2025-46251 WordPress VikRestaurants Table Reservations and Take-Away plugin

N/A N/A NEWS
Unknown ADV-1003

CVE-2025-46253 WordPress GutenKit plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Vulnerability Details Basic Information Title CVE-2025-46253 WordPress GutenKit plugin

N/A N/A NEWS
Unknown ADV-1001

CVE-2025-46254 WordPress Visual Composer Website Builder plugin <= 45.10.0 - Cross Site Scripting (XSS) vulnerability

Vulnerability Details Basic Information Title CVE-2025-46254 WordPress Visual Composer Website Builder plugin

N/A N/A NEWS
Unknown ADV-0999

CVE-2025-3457 Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Vulnerability Details Basic Information Title CVE-2025-3457 Ocean Extra

N/A N/A NEWS
Unknown ADV-0996

CVE-2025-3458 Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ocean_gallery_id'

Vulnerability Details Basic Information Title CVE-2025-3458 Ocean Extra

N/A N/A NEWS
Unknown ADV-0994

CVE-2025-3472 Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution

Vulnerability Details Basic Information Title CVE-2025-3472 Ocean Extra

N/A N/A NEWS
Unknown ADV-0952

CVE-2025-23176 Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’)

Vulnerability Details Basic Information Title CVE-2025-23176 Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command (...

N/A N/A NEWS