WordPress Paymob for WooCommerce plugin < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup vulnerability

Unauthenticated SQL Injection via Paymob Callback Pixel Lookup vulnerability discovered by Artus KG in WordPress Plugin Paymob for WooCommerce versions 4.1.9...

WordPress Bit Form plugin <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'filterText' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Bit Form versions = 3.2.0...

WordPress affiliate-toolkit plugin <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'orderby' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin affiliate-toolkit versions = 3.8.8...

GO-2023-1832 vulnerabilities

Vulnerabilities for packages: zot...

GO-2023-1568 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2022-1039 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2024-2517 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2024-2629 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2025-3585 vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips...

GO-2024-2520 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2024-3331 vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips...

GO-2025-3384 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GO-2023-1704 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GO-2025-3953 vulnerabilities

Vulnerabilities for packages: temporal...

GO-2026-4465 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2023-2020 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, promxy...

GO-2025-3607 vulnerabilities

Vulnerabilities for packages: tailscale, harbor...

GO-2023-1703 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph...

WordPress Events Manager plugin < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability

Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability discovered by Jakub Herman in WordPress Plugin Events Manager versions 7.4.1...