2025

Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abando

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Theme S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rbaer List Last Ch

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT B

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image

Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configure

Cross-Site Request Forgery (CSRF) vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Israpil Textmetric

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event p

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brecht Custom Rela

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ferranfg MPL-Publi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Post in pa

An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file. Ev

It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabl

Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the `offset` input is a

The Tax Switch for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class-name’ pa

The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpiePreviewData’ fu

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when

The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back i

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to m

Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This is

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentia

**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B f

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware vers

An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware

A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function sea

A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by t

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function E

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issu

The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects

IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated

A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part

A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is

A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulner

A vulnerability was found in panhainan DS-Java 1.0. It has been classified as problematic. Affected is an unknown functi

A vulnerability was found in panhainan DS-Java 1.0 and classified as critical. This issue affects the function uploadUse

Adept is a language for general purpose programming. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses act

ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQ

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Versions from 0.12.0 to befor

A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f9

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.

A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication.

The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore