Latest Vulnerabilities

WP Test Email <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting (CVE-2025-2325)

Foreman: disclosure of executed commands and outputs in foreman / red hat satellite (CVE-2025-2157)

tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were not... (CVE-2025-30066)

Traveler <= 3.1.8 - Reflected Cross-Site Scripting (CVE-2025-1773)

Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post (CVE-2025-1771)

Quarkus: security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of service (CVE-2024-1726)

WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site Scripting (CVE-2024-13497)

WP01 – Speed, Security, SEO consultant <= 2.6.2 - Authenticated (Subscriber+) Arbitrary File Download (CVE-2025-2267)

pixelstats <= 0.8.2 - Reflected Cross-Site Scripting (CVE-2025-2164)

Zoorum Comments <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVE-2025-2163)