CVE-2025-55580

SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting XSS issue in the Clients module. An authenticated attacker can inject JavaScript that executes in other users' browsers when the Clients page is viewed. The vulnerability is fixed in version 2.3.8...

CVE-2025-53310

Cross-Site Request Forgery CSRF vulnerability in Funnnny HidePost hidepost allows Reflected XSS.This issue affects HidePost: from n/a through = 2.3.8...

WordPress plugin Simple Payment 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-49252

CVE-2025-49252 describes an unauthenticated Local File Inclusion in the WordPress Besa theme/plugin (thembay Besa) via improper control of filenames for include/require statements. Affected: Besa up to version 2.3.8. Patch: fixed in 2.3.10. CVSS v3.1 base score 8.1 (HIGH) with network attack vect...

WordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Besa versions = 2.3.8...

CVE-2025-47640

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a...

CVE-2025-47640

CVE-2025-47640 is a SQL Injection vulnerability affecting WordPress plugin “Printcart Web to Print Product Designer for WooCommerce” up to version 2.3.8 (and possibly earlier per sources). The issue stems from improper neutralization of input leading to SQL injection, enabling unauthenticated att...

CVE-2024-32834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...

CVE-2023-49155

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...

CVE-2023-0759

Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8...

CVE-2020-1926

Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8...

PT-2025-21491 · WordPress · Event Tickets With Ticket Scanner

Name of the Vulnerable Software and Affected Versions: The Event Tickets with Ticket Scanner WordPress plugin versions prior to 2.3.8 Description: The issue concerns the lack of sanitization and escaping of certain parameters, potentially allowing Cross-Site Scripting attacks by users with a role...

WordPress plugin Event Tickets with Ticket Scanner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress plugin Booking and Rental Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress ELEX WooCommerce Request a Quote plugin <= 2.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin ELEX WooCommerce Request a Quote versions = 2.3.9...

WordPress Simple Payment plugin <= 2.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Payment versions = 2.3.8...

PT-2024-12062 · Unknown · Migrate Clone

Name of the Vulnerable Software and Affected Versions: Migrate Clone versions prior to 2.3.8 Description: The issue is related to a Missing Authorization vulnerability in Migrate Clone, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

WordPress plugin Button Generator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Schneider Electric多款产品 资源管理错误漏洞

The Schneider Electric PowerLogic PM5320, among others, is a power and energy meter from Schneider Electric France. A resource management error vulnerability exists in various Schneider Electric products that stems from the presence of uncontrolled resource consumption, which could result in an...

WordPress Timetable and Event Schedule by MotoPress plugin <= 2.3.8 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Ram in WordPress Plugin Timetable and Event Schedule versions = 2.3.8...