High Vulnerabilities
| Primary Vendor — Product |
Description | Published | CVSS Score | Source Info |
|---|---|---|---|---|
| _CreativeMedia_–Elite Video Player | Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in _CreativeMedia_ Elite Video Player allows Stored XSS. This issue affects Elite Video Player: from n/a through 10.0.5. | 2025-06-17 | 7.1 | CVE-2025-30988 |
| Adnan Haque (a11n)–Virtual Moderator | Cross-Site Request Forgery (CSRF) vulnerability in Adnan Haque (a11n) Virtual Moderator allows Cross-Site Scripting (XSS). This issue affects Virtual Moderator: from n/a through 1.4. | 2025-06-20 | 7.1 | CVE-2025-52772 |
| Adrian Lad–PostaPanduri | Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Adrian Ladó PostaPanduri allows SQL Injection. This issue affects PostaPanduri: from n/a through 2.1.3. | 2025-06-17 | 9.3 | CVE-2025-49452 |
| aharonyan–WP Front User Submit / Front Editor | Cross-Site Request Forgery (CSRF) vulnerability in aharonyan WP Front User Submit / Front Editor allows Cross Site Request Forgery. This issue affects WP Front User Submit / Front Editor: from n/a through 4.9.4. | 2025-06-20 | 7.1 | CVE-2025-52795 |
| amans2k–FunnelKit Automations Email Marketing Automation and CRM for WordPress & WooCommerce | The Recover WooCommerce Cart Abandonment, Newsletter, Email […] Content was cut in order to protect the source.Please visit the source for the rest of the article. This article has been indexed from Bulletins
Read the original article: Post navigation |