2022

The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users with

The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element URL, which could allow users with a ro

The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to maliciou

The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its

The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow

The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the fil

The NextCellent Gallery WordPress plugin through 1.9.35 does not sanitise and escape some of its image settings, which c

The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a

The MyCSS WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow a

The Product Configurator for WooCommerce WordPress plugin before 1.2.32 suffers from an arbitrary file deletion vulnerab

The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1

The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could

The Add Post URL WordPress plugin through 2.1.0 does not have CSRF check in place when updating its settings, which coul

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputti

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing non

The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its setting

The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which cou

The Tiny Contact Form WordPress plugin through 0.7 does not have CSRF check in place when updating its settings, which c

The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attack

The WP Sentry WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could all

The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to

The OpenBook Book Data WordPress plugin through 3.5.2 does not have CSRF check in place when updating its settings, whic

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.1.8 does not sanitize and escape so

The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints

The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which co

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding

The Site Offline or Coming Soon WordPress plugin through 1.6.6 does not have CSRF check in place when updating its setti

The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does no

The HTML2WP WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could all

The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to a

The Ultimate WooCommerce CSV Importer WordPress plugin through 2.0 does not sanitise and escape the imported data before

The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow

The Form - Contact Form WordPress plugin through 1.2.0 does not sanitize and escape Custom text fields, which could allo

The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, l

The Flower Delivery by Florist One WordPress plugin through 3.7 does not sanitise and escape some of its settings, which

The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which cou

The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to ma

The WordPress Security Firewall, Malware Scanner, Secure Login and Backup plugin before 4.2.1 does not sanitise and esca

The Login using WordPress Users ( WP as SAML IDP ) WordPress plugin before 1.13.4 does not sanitise and escape some of i

The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not s

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have auth

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by th

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected

NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito m

Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Clou

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitra

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.

rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.