2025

The B1.lt plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and includin

The Listly: Listicles For WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The Testimonial Post type plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ paramete

The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ param

The Useful Tab Block – Responsive & AMP-Compatible plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The Vertical scroll image slideshow gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘w

The Map My Locations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'map_my_location

The Ruven Themes: Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ruven_b

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to time-based

The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ve

The Zuppler Online Ordering plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and

The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure

The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all

A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the functi

A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file mod

A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown fu

A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects

NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive informat

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This

An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with e

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLit

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Le

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Referenc

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. AdGaurd verbosely logged each url that Saf

DiracX-Web is a web application that provides an interface to interact with the DiracX services. Prior to version 0.1.0-

Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error d

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Versions prior to

MaxKB is an open-source AI assistant for enterprise. Prior to versions 1.10.9-lts and 2.0.0, a Remote Command Execution

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed be

Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated fr

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not p

The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-a

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticate

A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execut

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execut

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated,

A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (E

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit