2025

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This

Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths

Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintend

Malicious e-mail content can be used to execute script code. Unintended actions can be executed in the context of the us

Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can

Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintend

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access due t

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forge

The Quick View for WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inc

The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type valida

The Hide Category by User Role for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versio

The QODE Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions

The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'order_by' parameter i

The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to Cross-Site Request Forgery i

The StaffList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to

The Customer Reviews Collector for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including

Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose creden

The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This

The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This

The Tiare Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.

The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,

The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Spe

The Simple Folio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'portfolio_name' parameter in

Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Proper

Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial

The Soundslides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the soundslides shortcode in all v

The Shouty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shouty shortcode in all versions up

The wp-twitpic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters of the 'twitpic

The Google Drive upload and download link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lin

The SortTable Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the sortt

The Reuters Direct plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

The Reuters Direct plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The dev

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affec

The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows

Spotipy is a Python library for the Spotify Web API. Prior to version 2.25.2, there is a cross-site scripting (XSS) vuln

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled R

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overfl

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suric

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suric

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suric

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suric

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suric

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suric