6.4

CVSS3.1

CVE-2024-13506 - GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authentic…

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the display_name profile parameter in all versions up to, and including, 2.8.97 due to insufficient input sanitization and output escaping. This ma…

📅 Published: Feb. 11, 2025, 11:10 a.m. 🔄 Last Modified: April 15, 2026, 12:35 a.m.

4.9

CVSS3.1

CVE-2025-0862 - SuperSaaS – online appointment scheduling <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Sit…

The SuperSaaS – online appointment scheduling plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘after’ parameter in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…

📅 Published: Feb. 11, 2025, 11:10 a.m. 🔄 Last Modified: April 22, 2026, 1:30 p.m.

0.0

CVE-2025-26491 -

This CVE ID is a duplicate of CVE-2025-26494.

📅 Published: Feb. 11, 2025, 10:29 a.m. 🔄 Last Modified: Feb. 14, 2025, 8:15 p.m.

0.0

CVE-2025-26490 -

This CVE ID is a duplicate of CVE-2025-26495.

📅 Published: Feb. 11, 2025, 10:29 a.m. 🔄 Last Modified: Feb. 14, 2025, 8:15 p.m.

6.9

CVSS4.0

CVE-2025-24956 -

A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.

📅 Published: Feb. 11, 2025, 10:29 a.m. 🔄 Last Modified: Sept. 24, 2025, 12:57 a.m.

7.1

CVSS4.0

CVE-2025-24812 -

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1…