CVE-2025-31005 WordPress Easyfonts plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Uzair Easyfonts easyfonts allows Cross Site Request Forgery.This issue affects Easyfonts: from n/a through = 1.1.2...

CVE-2025-31395 WordPress Easy Custom CSS plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a.ankit Easy Custom CSS easy-custom-css allows Stored XSS.This issue affects Easy Custom CSS: from n/a through = 1.0...

CVE-2025-32479 WordPress Flags Widget plugin <= 1.0.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ab-tools Flags Widget flags-widget allows Stored XSS.This issue affects Flags Widget: from n/a through = 1.0.7...

CVE-2025-32482 WordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in quanganhdo Custom Smilies custom-smilies allows Stored XSS.This issue affects Custom Smilies: from n/a through = 1.2...

College Management System File Upload Vulnerability

College Management System is a simple program. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A file upload vulnerability exists in College Management System version 1.0, which stems from the lack of valid validation of the uploaded file by...

PT-2025-15749 · Unknown · Easy Custom Css

Name of the Vulnerable Software and Affected Versions: Easy Custom CSS versions 1.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-15729 · Unknown · Purab Seo Meta Tags

Name of the Vulnerable Software and Affected Versions: Purab Seo Meta Tags versions 1.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Purab Seo Meta Tags, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For Purab Seo Meta Tags version...

WordPress plugin Squeeze 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Online Restaurant Management System 注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in version 1.0 of the Online Restaurant Management System, which stems from improper handling of parameter IDs in the /admin/comboupdate.php file, which can le...

Code-Projects Online Restaurant Management System 安全漏洞

Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. A security vulnerability exists in Code-Projects Online Restaurant Management System version 1.0, which stems from the mishandling of the parameter last in the /admin/membersave.p...

Online Restaurant Management System 注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of parameter IDs in the /admin/assignsave.php file, which can lead ...

PHPGurukul Men Salon Management System 安全漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Men Salon Management System version 1.0, which stems from an incorrect manipulation of the parameter cost that can lead to SQL injection...

company-financial-management 注入漏洞

company-financial-management is a company financial management system by the individual developer KenjFrog. An injection vulnerability exists in company-financial-management version 1.0, which stems from an incorrect operation of the parameter sort that can lead to SQL injection...

CVE-2025-31827

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in vlad.olaru Fonto fonto allows Path Traversal.This issue affects Fonto: from n/a through = 1.2.2...

PT-2025-15077 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System. This issue affects an unknown part of the file /dental not.php. The manipulation of the itr no argumen...

SourceCodester Online Eyewear Shop 注入漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. An injection vulnerability exists in SourceCodester...

SourceCodester Web-based Pharmacy Product Management System 代码问题漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. A code issue vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which stems from an incorrect manipulation...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the validation of externally entered SQL statements that are missing from the parameter itrno in the addpatient.php file. An...

PHPGurukul Online Fire Reporting System 注入漏洞

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the /admin/search.php file. An attacker can us...

CodeAstro Car Rental System 安全漏洞

CodeAstro Car Rental System is a car rental system from CodeAstro. A security vulnerability exists in CodeAstro Car Rental System version 1.0, which stems from an incorrect manipulation of the parameter ID that can lead to SQL injection...