| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-54132 | Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch | cursor | cursor | Medium | 4.4 | 2025-08-01 23:05:17 | Deep Dive |
| CVE-2025-54131 | Cursor bypasses its allow list to execute arbitrary commands | cursor | cursor | Medium | 6.4 | 2025-08-01 23:05:03 | Deep Dive |
| CVE-2025-49150 | Cursor Agent Potentially Leaks Information using JSON schema | getcursor | cursor | Medium | 5.9 | 2025-06-11 17:49:44 | Deep Dive |
| CVE-2025-32018 | Arbitrary file write from Cursor Agent through a prompt injection from malicious @Docs | getcursor | cursor | High | 8.0 | 2025-04-08 15:49:20 | Deep Dive |
| CVE-2024-48919 | RCE via Prompt Injection Into Cursor's Terminal Cmd-K | getcursor | cursor | - | - | 2024-10-22 20:58:22 | Deep Dive |
| CVE-2024-45599 | TCC Bypass in Cursor's macOS Application | getcursor | cursor | Low | 3.8 | 2024-09-24 18:02:19 | Deep Dive |
| CVE-2023-5911 | WP Custom Cursors <= 3.2 - Admin+ Stored XSS | Unknown | WP Custom Cursors | WordPress Cursor Plugin | - | - | 2024-01-08 19:00:37 | Deep Dive |
| CVE-2023-32739 | WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF) | Web_Trendy | WP Custom Cursors | WordPress Cursor Plugin | 高危 | - | 2023-11-09 20:56:16 | Deep Dive |
| CVE-2023-2221 | WP Custom Cursors < 3.2 - Admin+ SQLi | Unknown | WP Custom Cursors | WordPress Cursor Plugin | 高危 | - | 2023-06-19 10:52:42 | Deep Dive |
| CVE-2022-3150 | WP Custom Cursors < 3.2 - Admin+ SQLi | Unknown | WP Custom Cursors | WordPress Cursor Plugin | 高危 | - | 2022-10-17 00:00:00 | Deep Dive |
| CVE-2017-8466 | Microsoft Windows Cursor 权限许可和访问控制问题漏洞 | Microsoft Corporation | Windows Cursor | 高危 | - | 2017-06-15 01:00:00 | Deep Dive |