Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-04-22 | CVE-2025-1951 | IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges. | 8.4 |
| 2025-04-22 | CVE-2024-11299 | Information Exposure vulnerability in Caseproof Memberpress The Memberpress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.37 via the WordPress core search feature. | 7.5 |
| 2025-04-22 | CVE-2025-3457 | Cross-site Scripting vulnerability in Oceanwp Ocean Extra The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'oceanwp_icon' shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2025-04-22 | CVE-2025-3458 | Cross-site Scripting vulnerability in Oceanwp Ocean Extra The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ocean_gallery_id’ parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. | 5.4 |
| 2025-04-22 | CVE-2025-3472 | Code Injection vulnerability in Oceanwp Ocean Extra The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6. | 9.8 |
| 2025-04-22 | CVE-2025-46225 | Cross-site Scripting vulnerability in Migaweb Post in Page for Elementor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Post in page for Elementor allows DOM-Based XSS. | 5.4 |
| 2025-04-22 | CVE-2025-46226 | Cross-site Scripting vulnerability in Mpl-Publisher Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ferranfg MPL-Publisher allows Stored XSS. | 5.4 |
| 2025-04-22 | CVE-2025-46227 | Cross-site Scripting vulnerability in Brechtvds Custom Related Posts Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brecht Custom Related Posts allows Stored XSS. | 5.4 |
| 2025-04-22 | CVE-2025-46228 | Cross-site Scripting vulnerability in Avecnous Event Post Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post allows DOM-Based XSS. | 5.4 |
| 2025-04-22 | CVE-2025-46229 | Cross-site Scripting vulnerability in Textmetrics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Israpil Textmetrics allows Stored XSS. | 4.8 |