2026

iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users

iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perf

iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote atta

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauth

QiHang Media Web Digital Signage 3.0.9 contains a sensitive information disclosure vulnerability that allows remote atta

All-Dynamics Software enlogic:show 2.0.2 contains a session fixation vulnerability that allows attackers to set a predef

Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script t

Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard

SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to re

SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attacker

Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform admi

FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Executi

Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based SQL Injec

The MediaPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mpp-uploader shortcode

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized loss of

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a m

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthoriz

The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to unauthorized m

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table C

Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass

The Phlox theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-caption` HTML attribute in all

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Information Exposure in all vers

The FS Registration Password plugin for WordPress is vulnerable to privilege escalation via account takeover in all vers

The BuddyPress Xprofile Custom Field Types plugin for WordPress is vulnerable to arbitrary file deletion due to insuffic

The AS Password Field In Default Registration Form plugin for WordPress is vulnerable to privilege escalation via accoun

The Popupkit plugin for WordPress is vulnerable to arbitrary subscriber data deletion due to missing authorization on th

The Xagio SEO – AI Powered SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,

The URL Image Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all ver

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below ha

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below ha

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versi

The Page Expire Popup/Redirection for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the '

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of d

The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User's

The CBX Bookmark & Favorite plugin for WordPress is vulnerable to generic SQL Injection via the ‘orderby’ parameter in a

The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to SQL Injection via the 'params' paramet

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Sen