2024

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to St

The QQWorld Auto Save Images plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabili

The Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder plugin for WordPress is vulnerable to Stored Cross-S

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the S

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with

An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (D

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacti

Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another us

Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events w

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, hi

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive

wanEditor v4.7.11 was discovered to contain a cross-site scripting (XSS) vulnerability via the video upload function.

An issue in wanEditor v4.7.11 and fixed in v.4.7.12 and v.5 was discovered to contain a cross-site scripting (XSS) vulne

The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all v

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users t

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'arrow' attribu

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ha-ia-content-

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm-all-packag

Information exposure vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability allows unregistered us

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is v

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Glob

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fanc

The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capa

Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary co

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slitems' attribu

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve `Conne

Yii 2 is a PHP application framework. During internal penetration testing of a product based on Yii2, users discovered a

Wagtail is an open source content management system built on Django. Due to an improperly applied permission check in th

A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentifie

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentifie

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unkno

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_d

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace

In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Free all thermal zone debug memory