CVE-2025-54672

Cross-Site Request Forgery CSRF vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through = 6.4.3...

CVE-2025-54672 WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through = 6.4.3...

CVE-2025-54672 WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through = 6.4.3...

CVE-2025-54672

CVE-2025-54672 is a CSRF vulnerability in the WordPress plugin Photo Engine (Jordy Meow) affecting versions up to and including 6.4.3. The initial entry lists a CVSSv3.1 base score of 4.3 (Medium) with network access and user interaction required. Connected sources corroborate the issue as a Cros...

WordPress plugin Photo Engine 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-33225 · Unknown · Jordy Meow Photo Engine

Name of the Vulnerable Software and Affected Versions: Jordy Meow Photo Engine versions n/d through 6.4.3 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge...

Code-Projects Kitchen Treasure 代码问题漏洞

Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. A code issue vulnerability exists in Code-Projects Kitchen Treasure version 1.0, which stems from the incorrect manipulation of the parameter photo in the file /userregistration.php resulting in unlimited upload...

CVE-2025-4588 360 Photo Spheres <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The 360 Photo Spheres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sphere' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-4588 360 Photo Spheres <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The 360 Photo Spheres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sphere' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

PT-2025-31723 · WordPress · 360 Photo Spheres

Name of the Vulnerable Software and Affected Versions: 360 Photo Spheres plugin for WordPress versions up to and including 1.3 Description: The 360 Photo Spheres plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'sphere' shortcode. Insufficient input sanitization and...

WordPress plugin 360 Photo Spheres 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

360 Photo Spheres <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The 360 Photo Spheres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sphere' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-8379

A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-8379 Campcodes Online Hotel Reservation System edit_room.php unrestricted upload

A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-8174

A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/candidatesadd.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched remotely. The exploit...

Code-Projects Voting System 代码问题漏洞

Code-Projects Voting System is a Code-Projects open source election system. A code issue vulnerability exists in Code-Projects Voting System version 1.0, which stems from an unlimited upload due to the parameter photo in file /admin/candidatesadd.php...

PT-2025-30945 · Code Projects · Voting System 1.0

Name of the Vulnerable Software and Affected Versions: code-projects Voting System version 1.0 Description: A critical vulnerability exists in code-projects Voting System 1.0, related to unrestricted file upload. The issue affects an unknown functionality within the /admin/candidates add.php file...

E-Commerce Site Arbitrary File Upload Vulnerability

E-Commerce Site is an e-commerce site. E-Commerce Site suffers from an arbitrary file upload vulnerability that stems from improper manipulation of the parameter photo in the file /admin/usersphoto.php, no details of the vulnerability are available at this time...

Codecanyon iDentSoft 代码问题漏洞

Codecanyon iDentSoft is a dental office management system from Codecanyon Corporation. A code issue vulnerability exists in Codecanyon iDentSoft version 2.0, which stems from an incorrect manipulation of the parameter photo in the file /clinica/profile/updateSetting resulting in an arbitrary file...

WordPress Photo Gallery Plugin SQL Injection (CVE-2022-0169)

The Photo Gallery by 10Web WordPress plugin use auxiliary/gather/wpphotogallerysqli msf auxiliarywpphotogallerysqli show actions ...actions... msf auxiliarywpphotogallerysqli set ACTION msf auxiliarywpphotogallerysqli show options ...show and set options... msf auxiliarywpphotogallerysqli run Thi...