2025

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to C

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site

The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_label'

The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPres

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including,

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and incl

Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vuln

KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its fi

A vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 throug

OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does no

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied d

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission de

NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting (XSS) when develo

An improper authentication vulnerability has been reported to affect QNAP Authenticator. If an attacker gains physical a

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output w

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac