2022

The Thinkific Uploader WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high

The WP DS Blog Map WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow h

The Google Maps Anywhere WordPress plugin through 1.2.6.3 does not sanitise and escape any of its settings, which could

The DW Promobar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high

The Better Tag Cloud WordPress plugin through 0.99.5 does not sanitise and escape some of its settings, which could allo

The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow hi

The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high

The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privile

The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-pr

The weForms WordPress plugin before 1.6.14 does not sanitise and escape its settings, allowing high privilege users such

The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as l

The Crowdsignal Dashboard WordPress plugin before 3.0.8 does not sanitise and escape a parameter before outputting it ba

The YaySMTP WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high priv

The YaySMTP WordPress plugin before 2.2.1 does not have proper authorisation when saving its settings, allowing users wi

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, t

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download

The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upl

The Easy Username Updater WordPress plugin before 1.0.5 does not implement CSRF checks, which could allow attackers to m

The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it i

The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor direc

The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_option

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an un

A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected

A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Aff

A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerab

A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an u

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is so

A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System. This vulnerability affec

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown p

A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this is

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this

A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an

Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name

Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for

Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.

Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_mall

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unkn

A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vuln

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affe

A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affe

A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vuln

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an u

A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unk

A vulnerability, which was classified as problematic, was found in oretnom23 Fast Food Ordering System. This affects an

An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE fi

An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE fi

An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft Ima

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted