2021

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by use

The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify th

The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the stri

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify t

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify t

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length

The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the

The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length ente

The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify th

The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the s

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify t

The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by

The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by u

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered b

WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.

The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the titl

There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request t

The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML,

By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to

In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php) ac

In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget (includes/widgets/icon-box.php) acce

In the Elementor Website Builder WordPress plugin before 3.1.4, the accordion widget (includes/widgets/accordion.php) ac

In the Elementor Website Builder WordPress plugin before 3.1.4, the divider widget (includes/widgets/divider.php) accept

In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php) accept

In the Elementor Website Builder WordPress plugin before 3.1.4, the column element (includes/elements/column.php) accept

The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page a

The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to refle

The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course soluti

The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7

The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress

The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution Wor

The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin

Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Refle

In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint

The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwan

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwan

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order da

The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields (such as Email Subje

The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPre

In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was vulnerable

In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to tri

Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders f

Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post. There were no che

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inj

The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_f

A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had bui