2026

WeKan versions prior to 8.19 contain an authorization vulnerability in card move logic. A user can specify a destination

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only bo

WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checkl

WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checkl

WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment

WeKan versions prior to 8.19 contain an authorization weakness in the attachment upload API. The API does not fully vali

WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied userna

A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library

A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this issue is some unknown functionality of the fil

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by th

A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/

A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element

A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The affected element is the fu

A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown process

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of t

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the f

A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functiona

A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy

A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /b

A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_langu

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the

A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /gofor

A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /gofor

A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /gof

A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and inclu

The MP-Ukagaka plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including

The Subitem AL Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']

The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `list_class` shortcod

The Wikiloops Track Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wikiloops

The Video Onclick plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `youtube` shortcode

The OMIGO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `omigo_donate_button` short

The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The TITLE ANIMATOR plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

The Premmerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premmerce_wizard_actions' AJAX

The Bucketlister plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode `category` and `id` attr

The The Bucketlister plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the functi

A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this vuln

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the

The Post Slides WordPress plugin through 1.0.1 does not validate some shortcode attributes before using them to generate

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_accordion

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Grid component in a

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'bt_bb_tabs' shor

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_raw_conte

A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs