2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Missing Authorization vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Authentication Bypass.This is

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WCVendors WC Vendo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shaonsina Sina Ext

Cross-Site Request Forgery (CSRF) vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects P

In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek i

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored X

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Renzo Tejada Libro

Cross-Site Request Forgery (CSRF) vulnerability in Webaholicson Epicwin Plugin epicwin-subscribers allows SQL Injection.

Cross-Site Request Forgery (CSRF) vulnerability in Soli WP Mail Options wp-mail-options allows Stored XSS.This issue aff

Cross-Site Request Forgery (CSRF) vulnerability in mail250 Free WP Mail SMTP free-wp-mail-smtp allows Stored XSS.This is

Cross-Site Request Forgery (CSRF) vulnerability in dilemma123 Recent Posts Slider Responsive recent-posts-slider-respons

Cross-Site Request Forgery (CSRF) vulnerability in mangup Personal Favicon personal-favicon allows Stored XSS.This issue

Cross-Site Request Forgery (CSRF) vulnerability in Vadim Bogaiskov Bg Orthodox Calendar bg-orthodox-calendar allows Stor

Cross-Site Request Forgery (CSRF) vulnerability in wphobby Backwp backwp allows Path Traversal.This issue affects Backwp

Cross-Site Request Forgery (CSRF) vulnerability in David Shabtai Post Author post-author allows Stored XSS.This issue af

Cross-Site Request Forgery (CSRF) vulnerability in codedraft Mediabay - WordPress Media Library Folders allows Reflected

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nir Complete Googl

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vipul Jariwala WP

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Real Ti

Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a throu

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Inject

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This a

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical.

A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource

A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 a

An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Mana

An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Ma

A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulne

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unkno

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unkno

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affec

The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing cap

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulne

Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect s

Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may aff

Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may c

Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may af

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL st

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affect

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Af

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0

A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management Syste