2025

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulner

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missi

An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious act

The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7

The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the

The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting i

The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the

The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as we

The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outpu

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vul

The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of dat

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordi

The AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to u

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missin

The Site Search 360 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ss360-resultbloc

In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a nul

Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated at

A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an u

A Host header injection vulnerability exists in CTFd 3.7.5, due to the application failing to properly validate or sanit

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.1 is vulnerable to stored

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.1 is vulnerable to stored

A Host Header Poisoning Open Redirect issue in slabiak Appointment Scheduler v.1.0.5 allows a remote attacker to redirec

O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allo

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forg

Reflected Cross-Site Scripting (XSS) in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScr

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sk_select_reuseport() memory leak As

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netd

In the Linux kernel, the following vulnerability has been resolved: btrfs: add the missing error handling inside get_ca

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix inversion dependency warning while e

In the Linux kernel, the following vulnerability has been resolved: afs: Fix merge preference rule failure condition s