2024

The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which

The Qubely WordPress plugin before 1.8.5 does not validate and escape some of its block options before outputting them b

The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could

The UpQode Google Maps WordPress plugin through 1.0.5 does not validate and escape some of its shortcode attributes befo

The Customer Reviews for WooCommerce WordPress plugin before 5.17.0 does not validate and escape some of its shortcode a

The 3dprint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File M

The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high

The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could a

The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.

The WP Best Quiz WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could

The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allo

The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields bef

The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which coul

The Coru LFMember WordPress plugin through 1.0.2 does not have CSRF check in place when adding a new game, and is lackin

The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacki

The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking co

The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a s

Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which coul

The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zost

The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source e

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options pag

The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action,

The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before u

The Simple Post WordPress plugin through 1.1 does not sanitize user input when an authenticated user Text value, then it

The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortc

The Qyrr WordPress plugin before 0.7 does not escape the data-uri of the QR Code when outputting it in a src attribute,

The simple sort&search WordPress plugin through 0.0.3 does not make sure that the indexurl parameter of the shortcodes "

The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it i

The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IOR

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects t

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue

A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this v

The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as problematic. This affects an unknown part

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This v

A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the

A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed tr

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This fla

A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ fro

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability al

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated use

A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could