6454 matches found
WordPress Goodlayers Core plugin < 2.1.7 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Bonds in WordPress Plugin Goodlayers Core versions 2.1.7...
📄 Summer Employee Portal SQL Injection
Summer Employee Portal versions prior to 3.98.0 suffer from an authenticated remote SQL injection vulnerability. Exploit Title: Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677 Google Dork: inurl:"/MemberPages/quienesquien.aspx" Date: 09/22/2025 Exploit Author:...
WordPress WP Attractive Donations System Plugin < 1.29 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Bibek Dhakal in WordPress Plugin WP Attractive Donations System versions 1.29...
CVE-2025-59572 WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in purethemes WorkScout-Core allows Cross Site Request Forgery. This issue affects WorkScout-Core: from n/a through n/a...
WordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Penci Shortcodes & Performance versions 6.1...
Mozilla Firefox < 143.0
The version of Firefox installed on the remote Windows host is prior to 143.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-73 advisory. - Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these...
Flowise < 3.0.6 Multiples Vulnerabilities
According to its banner, the version of Flowise running on the remote host is 3.0.6. It is, therefore, affected by multiple vulnerabilities : - An Unauthenticated Password Reset Token Disclosure - A Server-Side Request Forgery vulnerability in the /api/v1/fetch-links endpoint - A Remote Code...
WordPress WP Hotel Booking plugin < 2.2.3 - Subscriber+ Rating Manipulation vulnerability
Subscriber+ Rating Manipulation vulnerability discovered by Muhammed Çelik in WordPress Plugin WP Hotel Booking versions 2.2.3...
AZL-66131 CVE-2025-47906 affecting package golang for versions less than 1.24.6-1
If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...
AZL-67512 CVE-2025-47906 affecting package golang for versions less than 1.18.8-10
If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...
CVE-2024-45618 affecting package opensc for versions less than 0.26.1-1
CVE-2024-45618 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-5917 affecting package libarchive for versions less than 3.7.7-3
CVE-2025-5917 affecting package libarchive for versions less than 3.7.7-3. A patched version of the package is available...
CVE-2025-54409 affecting package aide for versions less than 0.18.6-2
CVE-2025-54409 affecting package aide for versions less than 0.18.6-2. A patched version of the package is available...
CVE-2025-54126 affecting package fluent-bit for versions less than 3.1.9-5
CVE-2025-54126 affecting package fluent-bit for versions less than 3.1.9-5. A patched version of the package is available...
CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3
CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...
CVE-2024-45615 affecting package opensc for versions less than 0.26.1-1
CVE-2024-45615 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-8443 affecting package opensc for versions less than 0.26.1-1
CVE-2024-8443 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3
CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...