Development

CVE-2025-5303 – Freightview, Daylight, Day & Ross WordPress Plugins – Stored Cross-Site Scripting

CVE ID : CVE-2025-5303

Published : June 7, 2025, 9:15 a.m. | 1 hour, 30 minutes ago

Description : The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross Edition plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the expiry_date parameter in all versions up to, and including, 1.0.11, 2.2.6 and 2.1.10 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Apple’s App Store shaken: Court ends ‘Apple tax’ on external purchases

Apple’s App Store shaken: Court ends ‘Apple tax’ on external purchases

The court has recently denied Apple’s request to suspend the enforcement of a ruling that allows users to navigate to external websites for purchases via in-app links, deeming the request inappropriat …
Read more

Published Date:
Jun 07, 2025 (1 hour, 52 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2022-32898

Unpatched XSS Vulnerability in Jenkins Gatling Plugin Puts Users at Risk (CVE-2025-5806)

Unpatched XSS Vulnerability in Jenkins Gatling Plugin Puts Users at Risk (CVE-2025-5806)

The Jenkins community has issued a high-severity security advisory for a newly disclosed vulnerability in the Gatling Plugin—a popular tool used for integrating performance testing reports into Jenkin …
Read more

Published Date:
Jun 07, 2025 (1 hour, 35 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-5806

CVE-2025-47601 – MaxiBlocks Missing Authorization Privilege Escalation

CVE ID : CVE-2025-47601

Published : June 7, 2025, 5:15 a.m. | 2 hours, 35 minutes ago

Description : Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks allows Privilege Escalation.This issue affects MaxiBlocks: from n/a through 2.1.0.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-5814 – WordPress Profiler Data Modification Vulnerability

CVE ID : CVE-2025-5814

Published : June 7, 2025, 5:15 a.m. | 2 hours, 35 minutes ago

Description : The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsd_plugin_control() function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to reactivate previously deactivated plugins after accessing the “Profiler” page.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices

CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory warning of multiple high-impact vulnerabilities affecting CyberData’s SIP Emergency Intercom (Model 0112 …
Read more

Published Date:
Jun 07, 2025 (3 hours, 42 minutes ago)

Vulnerabilities has been mentioned in this article.