11783 matches found
WordPress Swiss Toolkit For WP plugin <= 1.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin Swiss Toolkit For WP versions = 1.4.2...
WordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin My auctions allegro versions = 3.6.20...
WordPress ACME Divi Modules plugin <= 1.3.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin ACME Divi Modules versions = 1.3.5...
CVE-2025-31620
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in carperfer CoverManager covermanager allows Stored XSS.This issue affects CoverManager: from n/a through = 0.0.1...
CVE-2025-31601
Cross-Site Request Forgery CSRF vulnerability in appointy Appointy Appointment Scheduler appointy-appointment-scheduler allows Cross Site Request Forgery.This issue affects Appointy Appointment Scheduler: from n/a through = 4.2.1...
CVE-2025-31542
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Blind SQL Injection.This issue affects My auctions allegro: from n/a through = 3.6.20...
CVE-2025-31593 WordPress OpenMenu plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OpenMenu OpenMenu allows Stored XSS. This issue affects OpenMenu: from n/a through 3.5...
CVE-2025-31543
CVE-2025-31543 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Twice Commerce . The description specifies improper input neutralization during web page generation, enabling DOM-level XSS. Affected software is listed as “Twice Commerce: from n/a through 1.3.1,” indicating...
CVE-2025-31434
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Stored XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through = 7.5.19...
CVE-2025-31432
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Chop Chop Pop-Up Chop Chop pop-up allows PHP Local File Inclusion.This issue affects Pop-Up Chop Chop: from n/a through = 2.1.7...
WordPress JetBlocks For Elementor plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin JetBlocks For Elementor versions = 1.3.16...
WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin JetWooBuilder versions = 2.1.18...
WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Subscribe to Download Lite versions = 1.2.9...
CVE-2025-30771
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alain-Aymerick FRANCOIS WP Cassify wp-cassify allows DOM-Based XSS.This issue affects WP Cassify: from n/a through = 2.3.5...
CVE-2025-30822
Cross-Site Request Forgery CSRF vulnerability in Hakik Zaman Custom Login Logo ideal-wp-login-logo-changer allows Cross Site Request Forgery.This issue affects Custom Login Logo: from n/a through = 1.1.7...
SUSE CVE-2024-53348
LoxiLB v.0.9.7 and before is vulnerable to Incorrect Access Control which allows attackers to obtain sensitive information and escalate privileges...
CVE-2025-25686
semcms =5.0 is vulnerable to SQL Injection in SEMCMSFuction.php...
WordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerability
Path Traversal vulnerability discovered by Falgun Patel in WordPress Plugin Bit Assist versions = 1.5.4...
CVE-2025-2912
A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5Omsgflush of the file src/H5Omessage.c. The manipulation of the argument oh leads to heap-based buffer overflow. The attack needs to be approached locally. The...