2025

A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerabi

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9

A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affect

The Posts per Cat [Unmaintained plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppc'

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this

IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject maliciou

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affecte

Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create p

Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This

IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in f

Horilla is a free and open source Human Resource Management System (HRMS). In versions up to and including 1.3, an attac

Emlog is an open source website building system. Version 2.5.13 has a stored cross-site scripting vulnerability that all

The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement

The WP-PManager WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could a

The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statemen

The Ninja Pages WordPress plugin through 1.4.2 does not sanitise and escape some of its settings, which could allow high

The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape a parameter before outputting it back in

The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape some of its settings, which could allow

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well

The Download HTML TinyMCE Button WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting

The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape some of its settings, which could allow high

The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape

The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape

The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which cou

The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses WordPress plugin before 1.9.4 does

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a S

The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of th

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, w

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, w

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high

The Post Grid, Posts Slider, Posts Carousel, Post Filter, Post Masonry WordPress plugin before 2.2.93 does not validate

The Popup Box WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high p

The Free Booking Plugin for Hotels, Restaurants and Car Rentals WordPress plugin before 1.3.15 does not have CSRF check

The RegistrationMagic WordPress plugin before 6.0.2.1 does not sanitise and escape some of its settings, which could al

The AVIF Uploader WordPress plugin before 1.1.1 does not sanitise uploaded SVG files, which could allow users with a rol

The Team WordPress plugin before 4.4.2 does not sanitise and escape some of its settings, which could allow high privil

The Logo Slider WordPress plugin before 3.7.1 does not have CSRF check in place when updating its settings, which could

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its set

The Maspik WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high priv

The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow hi

The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow hi

The Nested Pages WordPress plugin before 3.2.9 does not sanitise and escape some of its settings, which could allow high

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the

The Backup Database WordPress plugin through 4.9 does not sanitise and escape some of its settings, which could allow hi

The events-calendar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow

The Photo Gallery by 10Web WordPress plugin before 1.8.29 does not sanitise and escape some of its settings, which coul

The MapPress Maps for WordPress plugin before 2.93 does not sanitise and escape some of its settings, which could allow