PT-2025-4901

Name of the Vulnerable Software and Affected Versions NotFound Database Sync versions 0.5.1 and earlier Description The issue is related to a Missing Authorization vulnerability in NotFound Database Sync, which allows exploiting incorrectly configured access control security levels. Recommendatio...

PT-2025-4942 · Unknown · Notfound Xlsxviewer

Name of the Vulnerable Software and Affected Versions: NotFound XLSXviewer versions prior to 2.1.1 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows for Path Traversal in NotFound XLSXviewer...

PT-2025-4910 · Unknown · Notfound Customizable Captcha/Contact Us

Name of the Vulnerable Software and Affected Versions: NotFound Customizable Captcha and Contact Us versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. This...

PT-2025-4965 · Unknown · Tab My Content

Name of the Vulnerable Software and Affected Versions: NotFound Tab My Content versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS in the Tab My Content of...

PT-2025-4996

Name of the Vulnerable Software and Affected Versions NotFound ReadMe Creator versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables potential attacker...

PT-2025-4897

Name of the Vulnerable Software and Affected Versions NotFound History timeline versions n/a through 0.7.2 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS in the NotFound History...

PT-2025-4950

Name of the Vulnerable Software and Affected Versions NotFound Custom CSS Addons versions 1.9.1 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker...

PT-2025-5200

Name of the Vulnerable Software and Affected Versions NotFound Multi Uploader for Gravity Forms versions 1.1.3 and earlier Description The issue allows unrestricted upload of files with dangerous types, enabling attackers to upload web shells to web servers. This can lead to significant security...

PT-2025-5211

Name of the Vulnerable Software and Affected Versions NotFound Quick Count versions n/a through 3.00 Description The issue is related to the deserialization of untrusted data, allowing object injection in NotFound Quick Count. Recommendations For versions n/a through 3.00, update to a version tha...

PT-2025-4967 · Unknown · Notfound Group Category Creator

Name of the Vulnerable Software and Affected Versions: NotFound Group category creator versions 1.3.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This problem...

CVE-2025-22763

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1...

CVE-2025-22763

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1...

CVE-2025-22553

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in dhananjaysingh Multiple Carousel multicarousel allows SQL Injection.This issue affects Multiple Carousel: from n/a through = 2.0...

CVE-2025-22262

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WittyFolk Bonjour Bar bonjour-bar allows Stored XSS.This issue affects Bonjour Bar: from n/a through = 1.0.0...

CVE-2024-51818

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through = 6.4.3...

CVE-2024-49655

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems ARPrice arprice allows SQL Injection.This issue affects ARPrice: from n/a through = 4.1.3...

CVE-2024-49700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Reflected XSS.This issue affects ARPrice: from n/a through = 4.1.3...

CVE-2024-49333

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5...

CVE-2024-49303

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5...

CVE-2025-22262 WordPress Bonjour Bar plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Bonjour Bar allows Stored XSS. This issue affects Bonjour Bar: from n/a through 1.0.0...