2025

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET secu

The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.0

Mattermost versions 10.5.x <= 10.5.6, 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 9.11.x <= 9.11.16 fail to verify authorization

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites

An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vuln

In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL c

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQ

An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions loggi

An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version

The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary F

The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type valid

The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path valid

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

The Terms descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versi

The B1.lt plugin for WordPress is vulnerable to SQL Injection due to a missing capability check on the b1_run_query AJAX

The B1.lt plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and includin

The WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet theme for WordPres

The Listly: Listicles For WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The Testimonial Post type plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ paramete

The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ param

The Useful Tab Block – Responsive & AMP-Compatible plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The Vertical scroll image slideshow gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘w

The Map My Locations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'map_my_location

The Ruven Themes: Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ruven_b

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to time-based

The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks wi

The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ve

The Zuppler Online Ordering plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and

The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure

The School Management System for Wordpress plugin for WordPress is vulnerable to Local File Inclusion in all versions up

The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all

A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Af

Leviton AcquiSuite and Energy Monitoring Hub are susceptible to a cross-site scripting vulnerability, allowing an atta

A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by thi

A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected i

A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the functi

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some

A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file mod

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected b

Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on internal ports ports 9000 and

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interfa

Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withd

A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is

A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown fu

A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects

NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive informat

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This

A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. Th

A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by