2025

Reflected Cross-Site Scripting (XSS) in Anapi Group's h6web. This security flaw could allow an attacker to inject malici

Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescap

The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inclu

In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from

The Listivo - Classified Ads WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information E

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas version

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior

The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a miss

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services runnin

The DethemeKit For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inclu

CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list function

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount f

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functional

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode executi

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includi

CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable wh

CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to st

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when mali

The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, whi

The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which could allow

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl

The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting

CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation whe

The Puzzles theme for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and inclu

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Inje

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of dat

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Script

The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via th

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 pr

Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. Thi

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's De Galle

Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior t

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attac

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attack

Directory Traversal vulnerability in yeqifu carRental v.1.0 allows a remote attacker to obtain sensitive information via

A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_

Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before ve

A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Af

A vulnerability classified as problematic has been found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378

Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.