2025

A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control manageme

VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin

A vulnerability classified as problematic has been found in Maybecms 1.2. This affects an unknown part of the file /mb/a

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user u

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticate

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions u

The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versi

The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path valida

The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability che

The WP Image Uploader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg wi

The Embed Swagger UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsgui' shortco

The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4

The Music Sheet Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pn_msv' short

The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpb_post_list

The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditor_vtabs

The ECPay Ecommerce for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of data due to a missing cap

The Single-user-chat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial o

The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injec

The All Bootstrap Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Accordion" widget in

The Wonder FontAwesome plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The WE – Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Testimonial Author Nam

The Kona Gallery Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Kona: Instagram for Gu

The Stockdio Historical Chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stockd

The W2S – Migrate WooCommerce to Shopify plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to p

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to p

The HTML5 chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'HTML5CHAT' shortcode

The WP Dispensary plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpd_menu' shortcod

The Team Rosters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all ver

The System Dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Filename parameter in

The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing

The Ai Image Alt Text Generator for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pag

The Royal Core plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escala

The Typer Core plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.6 vi

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t

The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all version

The MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for Word

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is

A vulnerability was found in Cianet ONU GW24AC up to 20250127. It has been declared as problematic. Affected by this vul

The Automatically Hierarchic Categories in Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attack

A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an aut

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic

an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic