2022

The Donation Button WordPress plugin through 4.0.0 does not sanitize and escapes some parameters, which could allow user

The Donation Button WordPress plugin through 4.0.0 does not properly check for privileges and nonce tokens in its "donat

The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could

Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackO

The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which cou

The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .ph

The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which c

The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a

The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing an

The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pa

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow

The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to chan

The buddybadges WordPress plugin through 1.0.0 does not sanitise and escape a parameter before using it in a SQL stateme

The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthe

The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users s

The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL state

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX ac

The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the p

The Easy Form Builder WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow

The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before u

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not

The Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin WordPress plugin before 2.46 does not

The WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Lo

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin before 4

The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authori

The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which

Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a w

The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leadin

The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.

Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via /goform/SysToolRestoreSet .

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wif

Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.

ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.

Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method

Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set.

A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of t

Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (ev

A vulnerability classified as problematic has been found in yikes-inc-easy-mailchimp-extender Plugin up to 6.8.5. This a

Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied wi

A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local

An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could all

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loca

A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as

An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to di