2026

A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of t

A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the comp

A flaw has been found in thinkgem JeeSite up to 5.15.1. Impacted is an unknown function of the file /com/jeesite/common/

A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown process

A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability

A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unkno

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionalit

A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer o

A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetW

A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/p

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the

A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoL

A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the fi

A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file

A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patch_line_end of the fi

A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the l

A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArgu

A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file s

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wre

A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::AST_No

A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the

A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Nu

A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. T

A vulnerability has been found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSetIpBind of the file

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Ex

A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSaf

wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data

wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve priva

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload

wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wp

wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to move, merge,

wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to close or reo

wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or u

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip T

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Mani

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to SQL Injection via the 'coupon

The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated

openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.ph

openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The

openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and conta

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, stored XSS

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, an authenti

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, user email

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, when Glide

Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticate