2023

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerabili

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the compo

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the compo

The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check

An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary co

Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that

The AdSanity plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aj

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to page content injection in versions up to, and includi

The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fet

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in

The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on th

The PWA for WP & AMP for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pw

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and in

The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,

The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the export

The uListing plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the "ulisti

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Set

The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vu

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.

The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the

The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on se

The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and incl

The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up

The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and inclu

The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and includi

The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up

The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing cap

The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3. This mak

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and includ

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the

The DELUCKS SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saveSettings() function that h

The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘public/class-

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and in

The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.

An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.

In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in th

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=upda

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overf

Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to uplo

notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil