Results
39,956· Page 381/800The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on
The Pricing Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,
The Product Designer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check o
The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the 'tagged_filter' attribute of the 'os
The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'osm_map' sho
The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sharing block in a
The Social Sharing Plugin – Kiwi plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i
Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects Wo
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaineLabs Youzify.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships P
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Marketing Aut
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Softwar
The ScrollTo Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in version
The ScrollTo Top plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions u
The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File
The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File
The IQ Testimonials plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validatio
The Gutenberg Forms plugin for WordPress is vulnerable to arbitrary file uploads due to the users can specify the allowe
The Advanced AJAX Page Loader plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload
The Attachment File Icons (AF Icons) plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File
The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on
The Default Thumbnail Plus plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat
The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'ic
The Webico Slider Flatsome Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wbc
Cross-Site Request Forgery (CSRF) vulnerability in cliengo Cliengo – Chatbot cliengo allows Cross Site Request Forgery.T
Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-p
An high privileged remote attacker can enable telnet access that accepts hardcoded credentials.
A remote attacker with high privileges may use a deleting file function to inject OS commands.
A remote attacker with high privileges may use a writing file function to inject OS commands.
A remote attacker with high privileges may use a reading file function to inject OS commands.
An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privilege
There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permis
The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which cou
The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which coul
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with ano
The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat
The DN Footer Contacts WordPress plugin before 1.6.3 does not sanitise and escape some of its settings, which could allo
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to IP Address
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cros
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cros
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based
The Blog, Posts and Category Filter for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
Under certain conditions, the memory of SAP GUI for Windows contains the password used to log on to an SAP system, which
Due to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform, a developer can by
Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which
SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled input
SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled input
Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote
SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of p
Test your stack for 2024issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.