2026

A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processin

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unkn

A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the fil

A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTo

The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all

The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP hea

The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up t

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdc_menu' shortco

Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vul

The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and includ

A vulnerability has been found in SourceCodester Food Ordering System 1.0. This affects an unknown function of the file

A flaw has been found in SourceCodester Malawi Online Market 1.0. The impacted element is an unknown function of the fil

The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post

The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'baf_sbox' s

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the '

The FloristPress for Woo – Customize your eCommerce store for your Florist plugin for WordPress is vulnerable to Reflect

A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an unknown function of the

A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of th

An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authen

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Sess

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdo

A security flaw has been discovered in kalcaddle kodbox 1.64. Impacted is the function can of the file /workspace/source

The Masteriyo LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.6

A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the function Add of the file app/controller/

Saloon is a PHP library that gives users tools to build API integrations and SDKs. Versions prior to 4.0.0 used PHP's un

Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of

Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, the `repla

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.1, LiquidJS's

Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, fixture names

Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, when building

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetim

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code

The WP Job Portal plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation

OpenEMR is a free and open source electronic health records and medical practice management application. A Broken Access

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

OpenEMR is a free and open source electronic health records and medical practice management application. Starting in ver

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file /up

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio