2025

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentContro

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Ser

The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on t

The Searchie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sio_embed_media' shortc

The Yumpu E-Paper publishing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'YUMPU'

The Newsletter2Go plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch

The Bitly's WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin Ch

The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when incl

The Muslim Prayer Time-Salah/Iqamah plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Masjid ID

The 3DVieweronline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '3Dvo-model' short

The Linear plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linear_block_buy_commissi

The Files Download Delay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fddwrap' sh

The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sr_se

The Action Network plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all

The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensit

The SEMA API plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘catid’ parameter in all versi

The GS Insever Portfolio plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi

The Deliver via Shipos for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dvs

The Woocommerce check pincode/zipcode for shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in a

The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers

The ResAds plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions

The WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is vulnerable to SQL Injecti

The Responsive FlipBook Plugin Wordpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the rfbwp

The Skyword API Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'skyword_ifram

The Pósturinn\'s Shipping with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

The WhatsApp 🚀 click to chat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'manycontacts

The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Paginatio

The CLUEVO LMS, E-Learning Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issu

A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulne

A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affec

A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function list

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widg

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal

A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the

A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0.

A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0

There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affect

The <redacted>.exe or <redacted>.exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectiv

The <redacted>.so library, which is used by <redacted>, is vulnerable to a buffer overflow in the code that handles the

The CGI script <redacted>.sh can be used to download any file on the filesystem. This issue affects Iocharger firmware

After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default crede

Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary fil

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability  allows OS Command Inj