General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2025-13920 | The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in… | Medium (5.3) | 2026-01-24 | General Purpose |
| CVE-2026-1302 | The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all ve… | Medium (4.4) | 2026-01-24 | General Purpose |
| CVE-2026-1300 | The Responsive Header plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple plugin settings pa… | Medium (4.4) | 2026-01-24 | General Purpose |
| CVE-2026-1266 | The Postalicious plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions u… | Medium (4.4) | 2026-01-24 | General Purpose |
| CVE-2026-1208 | The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up … | Medium (4.3) | 2026-01-24 | General Purpose |