2024

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerabili

The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it

The EventON Premium WordPress plugin before 4.5.6, EventON WordPress plugin before 2.2.8 do not have authorisation in an

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX ac

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX ac

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a p

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated UR

The Hubbub Lite (formerly Grow Social) WordPress plugin before 1.32.0 does not sanitise and escape some of its settings,

The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before o

The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post (visible on t

The Voting Record WordPress plugin through 2.0 is missing sanitisation as well as escaping, which could allow any authen

The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as w

The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX act

The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX act

The Ultimate Maps by Supsystic WordPress plugin before 1.2.16 does not sanitise and escape some of its settings, which c

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export fi

The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting th

The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its set

The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privil

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of it

The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via a

The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in the

The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended

The Staff / Employee Business Directory for Active Directory WordPress plugin before 1.2.3 does not sanitize and escape

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating us

The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited

EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Opt

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redire

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. T

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option

The T1 WordPress theme through 19.0 is vulnerable to unauthenticated open redirect with which any attacker and redirect

The IURNY by INDIGITALL WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could all

The Lana Shortcodes WordPress plugin before 1.2.0 does not validate and escape some of its shortcode attributes before o

The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter be

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could al

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query st

The Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a parameter before using i

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file par

The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform P

The User registration & user profile WordPress plugin through 2.0 does not have CSRF check in some places, and is missin

The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting i

The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoi