2023

SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special charac

A vulnerability, which was classified as problematic, has been found in WooSidebars Plugin up to 1.4.1 on WordPress. Aff

emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three

The Get your number WordPress plugin through 1.1.3 does not sanitise and escape some of its settings, which could allow

The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes

The Quiz Maker WordPress plugin before 6.4.2.7 does not escape some parameters before outputting them back in attributes

The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting i

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise

The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, lead

The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high

The Hostel WordPress plugin before 1.1.5.2 does not sanitise and escape some of its settings, which could allow high pri

The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes be

The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could

A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function

A vulnerability classified as problematic has been found in WooFramework Branding Plugin up to 1.0.1 on WordPress. Affec

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerabilit

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue a

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vuln

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate valida

DokuWiki before 2023-04-04a allows XSS via RSS titles.

IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information in cleartext that could

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method

A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affe

A vulnerability was found in Watu Quiz Plugin up to 2.6.7 on WordPress. It has been rated as critical. This issue affect

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is th

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kyle Maurer Don8 plugin <= 0.4 versions.

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Cross-Site Request

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modif

The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments – Get Paid wit

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' p

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versio

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Contact Form Builder by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, an

The Contact Form Builder by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' para

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized medic

The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'update_options' function in ver

The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'update_vk_blocks_options' funct

The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ

The Page Builder by AZEXO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab

The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ

The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'azh_post' shortcode in