2024

Missing Authorization vulnerability in Clever Widgets Enhanced Text Widget allows Exploiting Incorrectly Configured Acce

Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affe

Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Contr

Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Ac

Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Inco

Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured A

A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows te

Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthori

An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows una

The Fluent Forms WordPress plugin before 5.2.1 does not sanitise and escape some of its settings, which could allow hig

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. T

A vulnerability was found in WeiYe-Jing datax-web 2.1.1. It has been classified as critical. This affects an unknown par

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affec

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record functi

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Setti

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forwar

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC F

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL functi

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center pol

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station funct

Oxide before 6 has unencrypted Control Plane datastores.

Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log f

ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affecte

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affec

Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024

A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file s

A vulnerability was found in JFinalCMS 1.0. It has been rated as critical. Affected by this issue is the function update

A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an un

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This

A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unkno

A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown funct

A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some u

IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user

The Easy Code Snippets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in

The Feedpress Generator – External RSS Frontend Customizer plugin for WordPress is vulnerable to Reflected Cross-Site Sc

The Mini Program API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'qvideo' shortco

The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthoriz

The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to Reflected

The TWChat – Send or receive messages from users plugin for WordPress is vulnerable to Reflected Cross-Site Scripting du

The Smoove connector for Elementor forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

The Simple Side Tab WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow h

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via t

The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing

The CardGate Payments for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page

The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '_wp

The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pag