2024

The T(-) Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tminus' shortcode

The Subscribe to Comments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_que

The Ultimate TinyMCE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field' shortcode in all

A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown pa

The Code Explorer plugin for WordPress is vulnerable to arbitrary external file reading in all versions up to, and inclu

A vulnerability was found in wuzhicms 4.1.0. It has been classified as critical. Affected is the function add/edit of th

A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function get

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of th

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unkn

InstantCMS is a free and open source content management system. In photo upload function in the photo album page there i

Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Acce

Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configu

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking Syste

Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access

Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control S

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-pa

A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addres

Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Acce

Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Acce

Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitr

Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite – Advanced Dark Mode Plugin for WordPress darkm

Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in

An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect UR

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /a

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

A Reflected Cross Site Scripting (XSS) vulnerability was found in /odms/admin/booking-search.php in PHPGurukul Online DJ

A Reflected Cross Site Scripting (XSS) vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Bo

The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcod

In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authen

An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions

lunary-ai/lunary v1.2.26 contains an email injection vulnerability in the Send email verification API (/v1/users/send-ve

mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to c

A Cross-Site Request Forgery (CSRF) vulnerability exists in the `install_comfyui` endpoint of the `lollms_comfyui.py` fi

A Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/admin/profile.php in PHPGurukul IFSC Code

A Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/index.php in PHPGurukul IFSC Code Finder P

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in link

Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash.

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox

Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the brows

Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firefo

Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox <

In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and d

The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asaduzzaman Abir L

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Web Bricks

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Coub Coub coub all

The Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's newsletters_video sho

A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as criti