2023

The management portal component of JetNexus/EdgeNexus ADC 4.2.8 was discovered to contain a command injection vulnerabil

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before out

The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode att

The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which c

The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before out

The OneClick Chat to Order WordPress plugin before 1.0.4.2 does not validate and escape some of its shortcode attributes

The 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before out

The Word Balloon WordPress plugin before 4.19.3 does not validate and escape some of its shortcode attributes before out

The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over P

The Landing Page Builder WordPress plugin before 1.4.9.9 does not validate and escape some of its shortcode attributes b

The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outpu

The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes befor

The Genesis Columns Advanced WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes

The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass au

The Mongoose Page Plugin WordPress plugin before 1.9.0 does not validate and escape one of its shortcode attributes, whi

The Rate my Post WordPress plugin before 3.3.9 does not validate and escape one of its shortcode attributes, which could

The WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attr

The Easy Appointments WordPress plugin before 3.11.2 does not validate and escape some of its shortcode attributes befor

The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allo

The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attr

The ShiftNav WordPress plugin before 1.7.2 does not validate and escape some of its shortcode attributes before outputti

The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before

The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before ou

The Easy Bootstrap Shortcode WordPress plugin through 4.5.4 does not validate and escape some of its shortcode attribute

The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting the

The Optimize images ALT Text & names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place wh

The Sitemap WordPress plugin before 4.4 does not validate and escape some of its shortcode attributes before outputting

The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes

The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before

The Page-list WordPress plugin before 5.3 does not validate and escape some of its shortcode attributes before outputtin

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before

The Easy Social Feed WordPress plugin before 6.4.0 does not validate and escape some of its shortcode attributes before

The Search & Filter WordPress plugin before 1.2.16 does not validate and escape some of its shortcode attributes before

The BruteBank WordPress plugin before 1.9 does not have CSRF check in place when updating its settings, which could allo

The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in

The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenti

The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to

The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers

The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to p

The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, B

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow