2024

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been declared as critical. Affected by this

The BlockMeister – Block Pattern Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

The Increase upload file size & Maximum Execution Time limit plugin for WordPress is vulnerable to Reflected Cross-Site

The Language Switcher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_a

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o

The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The ShopLentor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulner

The Embed videos and respect privacy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'v' pa

The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripti

The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg withou

The FULL – Cliente plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg

The WP Ultimate Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpupg-grid-

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient

A path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the `lollms_file_system.p

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 11.4 before 17.2.9, all ver

Snipe-IT before 7.0.10 allows remote code execution (associated with cookie serialization) when an attacker knows the AP

The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must hav

A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical. This affects an un

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **Cross-Site Scripti

A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue i

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vu

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read p

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin vali

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of di

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Metagauss EventPrime eventprime-event-calendar-mana

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership After Login Redirectio

A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability a

A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue aff

A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. This vulnerability affects the funct

A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of t

A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of

A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code

A vulnerability, which was classified as problematic, was found in Contemporary Control System BASrouter BACnet BASRT-B

An attacker who successfully exploited these vulnerabilities could cause the robot to stop. A vulnerability exists in

In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 pr

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vu

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vu

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control v

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control v

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vu

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a stored Cross-Site Scriptin