825 matches found
CVE-2023-31220
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin = 2.2 versions...
CVE-2023-31072
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Praveen Goswami Advanced Category Template plugin = 0.1 versions...
CVE-2023-31076
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.6 versions...
CVE-2023-22710
Unauth. Reflected Cross-Site Scripting XSS vulnerability in chilidevs Return and Warranty Management System for WooCommerce plugin = 1.2.3 versions...
CVE-2023-40664
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...
CVE-2023-40553
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Plausible.Io Plausible Analytics plugin = 1.3.3 versions...
CVE-2023-39308
Unauth. Stored Cross-Site Scripting XSS vulnerability in UserFeedback Team User Feedback plugin = 1.0.7 versions...
CVE-2023-39164
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui plugin = 4.6.19 versions...
CVE-2023-35772
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alain Gonzalez Google Map Shortcode plugin = 3.1.2 versions...
CVE-2023-35043
Unauth. Stored Cross-Site Scripting XSS vulnerability in Neha Goel Recent Posts Slider plugin = 1.1 versions...
CVE-2023-36287
An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter...
CVE-2023-36288
An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via GET configure parameter...
CVE-2023-33317
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce Returns and Warranty Requests plugin = 2.1.6 versions...
CVE-2023-30499
Unauth. Reflected Cross-Site Scripting XSS vulnerability in FolioVision FV Flowplayer Video Player plugin = 7.5.32.7212 versions...
CVE-2023-45341
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-28375
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information...
CVE-2023-44245
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin = 4.0.0 versions...
CVE-2023-27886
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP POST parameter called by index.php script...
CVE-2023-27394
Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView.php scripts...