| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-23820 | WordPress Content Security Policy Pro plugin <= 1.3.5 - CSRF to Stored XSS vulnerability | thapa.laxman | Content Security Policy Pro | High | 7.1 | 2025-01-16 20:07:13 | Deep Dive |
| CVE-2024-56295 | WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerability | Ays Pro | Poll Maker | Medium | 6.5 | 2025-01-15 15:23:40 | Deep Dive |
| CVE-2024-49375 | Remote Code Execution via Remote Model Loading in Rasa | RasaHQ | rasa-pro-security-advisories | Critical | 9.0 | 2025-01-14 18:59:53 | Deep Dive |
| CVE-2024-11423 | Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch | WP Swings | Gift Cards for WooCommerce Pro | High | 7.5 | 2025-01-08 11:09:25 | Deep Dive |
| CVE-2024-11939 | Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data | StylemixThemes | Cost Calculator Builder PRO | High | 7.5 | 2025-01-08 08:18:17 | Deep Dive |
| CVE-2024-47934 | TXOne Networks Portable Inspector Management Program Improper Input Validation Vulnerability | TXOne Networks | Portable Inspector | Medium | 5.3 | 2025-01-08 03:00:31 | Deep Dive |
| CVE-2025-22350 | WordPress Indeed Ultimate Learning Pro plugin <= 3.9 - SQL Injection vulnerability | WpIndeed | Ultimate Learning Pro | High | 7.6 | 2025-01-07 16:48:45 | Deep Dive |
| CVE-2025-22584 | WordPress Timeline Pro plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability | PluginsPoint | Timeline Pro | Medium | 6.5 | 2025-01-07 14:57:05 | Deep Dive |
| CVE-2024-12077 | Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id' | wpdevart | Booking calendar, Appointment Booking System | Medium | 6.1 | 2025-01-07 07:22:34 | Deep Dive |
| CVE-2024-7696 | AXIS Camera Station Pro 安全漏洞 | Axis Communications AB | AXIS Camera Station Pro | Medium | 6.3 | 2025-01-07 05:38:43 | Deep Dive |
| CVE-2024-11899 | Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | bqworks | Slider Pro Lite | Medium | 6.4 | 2025-01-07 03:21:59 | Deep Dive |
| CVE-2024-13140 | Emlog Pro Cover Upload article.php cross site scripting | - | Emlog Pro | Low | 3.5 | 2025-01-05 11:31:05 | Deep Dive |
| CVE-2024-13135 | Emlog Pro Subpage twitter.php cross site scripting | - | Emlog Pro | Low | 3.5 | 2025-01-05 08:31:05 | Deep Dive |
| CVE-2024-13132 | Emlog Pro Subpage article.php cross site scripting | - | Emlog Pro | Low | 3.5 | 2025-01-05 04:31:05 | Deep Dive |
| CVE-2024-37438 | WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability | Uncanny Owl | Uncanny Toolkit Pro for LearnDash | Medium | 5.4 | 2025-01-02 13:31:11 | Deep Dive |
| CVE-2023-45766 | WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability | Ays Pro | Poll Maker | 中危 | - | 2025-01-02 11:59:55 | Deep Dive |
| CVE-2020-9089 | 华为产品安全漏洞 | Huawei | HUAWEI P30 Pro | Low | 3.3 | 2024-12-27 09:44:21 | Deep Dive |
| CVE-2020-9081 | 华为产品安全漏洞 | Huawei | HUAWEI Mate 20 | Low | 3.5 | 2024-12-27 09:34:40 | Deep Dive |
| CVE-2020-9080 | 华为产品安全漏洞 | Huawei | HUAWEI Mate 20 Pro | High | 7.8 | 2024-12-27 09:23:50 | Deep Dive |
| CVE-2024-11682 | G Web Pro Store Locator <= 2.1 - Reflected Cross-Site Scripting | moonheart | G Web Pro Store Locator | Medium | 6.1 | 2024-12-21 07:03:03 | Deep Dive |