The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Red Hat, Inc. has announced the availability of Red Hat Enterprise Linux (RHEL) 10.0, a major update of the company’s enterprise Linux line of products. Some of the main new innovations of RHEL 10 include AI-powered Linux management with Lightspeed and enhanced security features for the quantum frontier…..

The latest motion designs and animation concepts to keep you inspired and up-to-date. Source: Read More 

CVE ID : CVE-2024-5878

Published : May 20, 2025, 8:15 a.m. | 20 minutes ago

Description : Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin’s bundled SimpleLightbox JavaScript library (version 2.1.5) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Severity: 6.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-2929

Published : May 20, 2025, 6:15 a.m. | 1 hour, 46 minutes ago

Description : The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-4322

Published : May 20, 2025, 6:15 a.m. | 1 hour, 46 minutes ago

Description : The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user’s identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…