2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oceanwp Ocean Extr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Cor

Missing Authorization vulnerability in QuickcabWP QuickCab.This issue affects QuickCab: from n/a through 1.3.3.

Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Conf

Cross-Site Request Forgery (CSRF) vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validatio

A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. T

A vulnerability, which was classified as critical, was found in code-projects Health Center Patient Record Management Sy

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulner

The StageShow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘anchor’ parameter in all versio

The Developer Formatter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all vers

The Paged Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode

The WordPress Ajax Load More and Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t

The Hide It plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hideit' shortcode in all

The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, a

The Runners Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'runnerslog' shortcod

The BNS Featured Category plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bnsfc' sho

The Freemind Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'freemind' shortc

The ESV Bible Shortcode for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'kbalert' shortcod

The Hive Support | AI-Powered Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin for WordPress is vulnerable

The WP Online Users Stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in

The WP Online Users Stats plugin for WordPress is vulnerable to time-based SQL Injection via the ‘table_name’ parameter

Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect avail

Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerabili

Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availab

Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerabi

Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this

The Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Requ

Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnera

The Art Theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'arttheme_them

The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability c

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a c

The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and in

A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affec

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a speci

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when

IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes i

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau versions 0.9.0 through 0.9.1

A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424.

A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250

A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnera

A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribe_to_spot/subscribe

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critic

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Con

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vec

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as cri

A vulnerability classified as critical was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0.

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vect

A vulnerability classified as critical has been found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by