2024

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's AI features all

The Ultimate Video Player For WordPress WordPress plugin before 2.2.3 does not have proper capability check when updati

Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creatio

Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields functi

The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to unauthorize

The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to Stored Cros

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could a

A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some

A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's "Separator" ele

The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plu

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's butt

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Coun

A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an

A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected

A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Aff

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic.

HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been declared as problemati

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been classified as problema

A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and classified as problematic. Affe

A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected b

A flaw was found in Red Hat Enterprise Application Platform 8. When an OIDC app that serves multiple tenants attempts to

A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affecte

A vulnerability, which was classified as problematic, has been found in Campcodes Online Event Management System 1.0. Th

A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bound

A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and

Server-side request forgery (SSRF) in PingFederate allows unauthenticated http requests to attack network resources and

A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability aff

A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an u

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affecte

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Server 2021 and Subs

A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the m

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via file upload feature in Syllabus module.

Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earl

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_price_lis

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of widgets

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gute

The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and includin

The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘twitter_username’ parameter i

The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to

The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to Stored Cross-Site Scripting

The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Sit

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) pl

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker wit