2023

The Ever Compare WordPress plugin through 1.2.3 does not have CSRF check when activating plugins, which could allow atta

The HT Politic WordPress plugin before 2.3.8 does not have CSRF check when activating plugins, which could allow attacke

The Free WooCommerce Theme 99fy Extension WordPress plugin before 1.2.8 does not have CSRF check when activating plugins

The WP News WordPress plugin through 1.1.9 does not have CSRF check when activating plugins, which could allow attackers

The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attac

The WP Film Studio WordPress plugin before 1.3.5 does not have CSRF check when activating plugins, which could allow att

The QuickSwish WordPress plugin before 1.1.0 does not have CSRF check when activating plugins, which could allow attacke

The WP Education WordPress plugin before 1.2.7 does not have CSRF check when activating plugins, which could allow attac

The HT Portfolio WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attac

The HT Event WordPress plugin before 1.4.6 does not have CSRF check when activating plugins, which could allow attackers

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could

The Schedulicity WordPress plugin through 2.21 does not validate and escape some of its shortcode attributes before outp

The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using

The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenti

The menu shortcode WordPress plugin through 1.0 does not validate and escape some of its block options before outputting

The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities whic

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with ro

The NEX-Forms WordPress plugin before 8.3.3 does not validate and escape some of its shortcode attributes before outputt

In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible

In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible

The directory-pro WordPress plugin before 1.9.5, final-user-wp-frontend-user-profiles WordPress plugin before 1.2.2, pro

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by a

Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerabilit

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could al

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve sy

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a command injection vulnerability that could

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability that could allow an attacker

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targe

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain an improper access control vulnerability, whi

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which a low-level user cou

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an unauthenticated attacker could generate a vali

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set in

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status se

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 version

Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information vi

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter.

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter

An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via c

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally insta

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin <= 2.0.4 v

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications

Cross-Site Request Forgery (CSRF) vulnerability in Pankaj Jha WordPress Ping Optimizer plugin <= 2.35.1.2.3 versions.

db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traver

Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and P