IBM i is affected by a privilege escalation in IBM i SQL services

Published 2025-11-01 by ibm

Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution

Published 2025-11-01 by Wordfence

Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read

Published 2025-11-01 by Wordfence

RESTful Content Syndication 1.1.0 - 1.5.0 - Authenticated (Contributor+) Arbitrary File Upload

Published 2025-11-01 by Wordfence

Delicious Recipes <= 1.9.0 - Authenticated (Contributor+) Arbitrary File Upload

Published 2025-11-01 by Wordfence

Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution

Published 2025-11-01 by Wordfence

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

Published 2025-11-01 by Wordfence

Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

Published 2025-11-01 by Wordfence

Schema & Structured Data for WP & AMP <= 1.51 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injection

Published 2025-11-01 by Wordfence

Folderly <= 0.3 - Incorrect Authorization to Authenticated (Author+) Term Deletion

Published 2025-11-01 by Wordfence

WP Discourse <= 2.5.9 - Authenticated (Author+) Information Exposure

Published 2025-11-01 by Wordfence

Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update

Published 2025-11-01 by Wordfence

Flying Images: Optimize and Lazy Load Images for Faster Page Speed <= 2.4.14 - Authenticated (Admin+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password

Published 2025-11-01 by Wordfence

Schema Scalpel <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema

Published 2025-11-01 by Wordfence

Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure

Published 2025-11-01 by Wordfence