2025

The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' short

The Webcamconsult plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vuln

The JSM Screenshot Machine Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The ShipWorks Connector for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Sc

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Feed Name value

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

The List category posts WordPress plugin before 0.90.3 does not validate and escape some of its shortcode attributes bef

The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' paramet

The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Reflected Cross-Si

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerab

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Fo

In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead

In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This co

In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to

In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local in

In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could

In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a c

In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services d

KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted math

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn

Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerab

OtCMS <=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can Read system files arbitr

WeGIA < 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados_addInfo parameter of documentos_funcionario.php.

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this dow

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulner

Cross Site Scripting vulnerability in InformationPush master version allows a remote attacker to obtain sensitive inform

Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain se

Clickjacking vulnerability in typecho v1.2.1.

A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown par

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An

Hard-coded credentials were included as part of the application binary. These credentials served as part of the applica

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the web portal.

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown p

A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability.

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow a

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style_settings’ parameter i

The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The quote-posttype-plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Author field in all

The Sandbox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the export_do