2025

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

The Enter Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown and Image

The YITH WooCommerce Quick View plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yith_

The MarqueeAddons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Testimonial Marquee

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Co

The King Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing

The Kingcabs theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘progressbarLayout’ parameter in a

The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication check

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to

Growatt ShineLan-X communication dongle has an undocumented backup account with undocumented credentials which allows si

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker wi

ShineLan-X contains a stored cross site scripting (XSS) vulnerability in the Plant Name field. A HTML payload will be di

ShineLan-X contains a stored cross site scripting (XSS) vulnerability in the local configuration web server. The JavaScr

ShineLan-X contains a set of credentials for an FTP server was found within the firmware, allowing testers to establish

A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unkno

A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unkn

A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown func

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicom

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the funct

A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown functio

A weakness has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing

A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown co

A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of th

A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function snprint

The HAPPY – Helpdesk Support Ticket System plugin for WordPress is vulnerable to authorization bypass due to a missing c

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endp

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the

The The Shortcode Ajax plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and in

The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data de

The 404 Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.0 due to

The Doubly – Cross Domain Copy Paste for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all ver

The Extensive VC Addons for WPBakery page builder plugin for WordPress is vulnerable to Local File Inclusion in all vers

The Lucky Draw Contests plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

The Image Slider by Ays- Responsive Slider and Carousel plugin for WordPress is vulnerable to Cross-Site Request Forgery

The Solutions Ad Manager plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.0.0

The AnnunciFunebri Impresa plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa

The Popup Builder (Easy Notify Lite) plugin for WordPress is vulnerable to unauthorized modification of data due to a mi

The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2

The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to

The Popover Windows plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The Popover Windows plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1

The Quick Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versi

The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including,

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inc

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inc

The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native ga

The HT Slider for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_title' para

The Custom Post Type UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'label' parameter duri

The Design Import/Export plugin for WordPress is vulnerable to SQL Injection via XML File Import in all versions up to,

The Custom Frames plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter of the 'cu