2023

The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high priv

The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, whi

The Welcart e-Commerce WordPress plugin before 2.8.6 does not validate user input before using it in file_exist() functi

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content

The Login with Cognito WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could all

The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow

The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content

The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, wh

The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as

The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal a

The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using th

The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it

The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs

The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL stat

The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, w

The Team Members WordPress plugin before 5.2.1 does not sanitize and escapes some of its settings, which could allow hig

The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensu

The Visual Email Designer for WooCommerce WordPress plugin before 1.7.2 does not properly sanitise and escape a paramete

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using t

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the fil

A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the functi

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord cha

A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this

A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is s

A vulnerability has been found in IS_Projecto2 and classified as critical. This vulnerability affects unknown code of th

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the fil

Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or c

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree

A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of t

A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getC

A vulnerability classified as problematic was found in Jobs-Plugin. Affected by this vulnerability is an unknown functio

A vulnerability, which was classified as problematic, was found in dragonexpert Recent Threads on Index. Affected is the

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This a

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by

A vulnerability has been found in stiiv contact_app and classified as problematic. Affected by this vulnerability is the

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0

A vulnerability classified as problematic was found in cronvel string-kit up to 0.12.7. This vulnerability affects the f

A vulnerability classified as critical has been found in Hesburgh Libraries of Notre Dame Sipity. This affects the funct

A vulnerability, which was classified as problematic, has been found in enigmaX up to 2.2. This issue affects the functi

A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown func

A vulnerability was found in porpeeranut go-with-me. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in kirill2485 TekNet. It has been classified as problematic. Affected is an unknown function o

A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects t

The FTP (aka "Implementation of a simple FTP client and server") project through 96c1a35 allows remote attackers to caus

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is so

A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-

A vulnerability was found in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. It has been rated as problematic. This

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is a