2023

The Lightweight Accordion WordPress plugin before 1.5.15 does not validate and escape some of its block options before o

Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes befor

The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputt

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using

The Easy Accept Payments for PayPal WordPress plugin before 4.9.10 does not validate and escape some of its shortcode at

The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attrib

The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortco

The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before output

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of i

The uTubeVideo Gallery WordPress plugin before 2.0.8 does not validate and escape some of its shortcode attributes befor

The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in

The Amazon JS WordPress plugin through 0.10 does not validate and escape some of its shortcode attributes before outputt

The Judge.me Product Reviews for WooCommerce WordPress plugin before 1.3.21 does not validate and escape some of its sho

The Responsive Gallery Grid WordPress plugin before 2.3.9 does not validate and escape some of its shortcode attributes

The JetWidgets For Elementor WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attribute

The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes bef

The Youtube Channel Gallery WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes b

The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputt

The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before

The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes be

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.5 does not validate and escape one of its shortc

The Easy PayPal Buy Now Button WordPress plugin before 1.7.4 does not validate and escape some of its shortcode attribut

The Twenty20 Image Before-After WordPress plugin through 1.5.9 does not validate and escape some of its shortcode attrib

The Meks Flexible Shortcodes WordPress plugin before 1.3.5 does not validate and escape some of its shortcode attributes

The Rich Table of Contents WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes b

The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes befo

The Widgets on Pages WordPress plugin before 1.8.0 does not validate and escape its shortcode attributes before outputti

The Widget Shortcode WordPress plugin through 0.3.5 does not validate and escape some of its shortcode attributes before

The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before outputting

The amr shortcode any widget WordPress plugin through 4.0 does not validate and escape some of its shortcode attributes

The GiveWP WordPress plugin before 2.24.0 does not validate and escape some of its shortcode attributes before outputtin

The WP FullCalendar WordPress plugin before 1.5 does not ensure that the post retrieved via an AJAX action is public and

Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerabil

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during un

In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file

Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outsid

Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server

A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown functio

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.

In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.

In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.