WordPress News List plugin <= 1.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin NewsTicker versions = 1.0...

CVE-2024-13678

The R3W InstaFeed WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin R3W InstaFeed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-7941 · Codeastro · Bus Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Codeastro Bus Ticket Booking System version 1.0 Description: The issue concerns a SQL injection vulnerability via the kodetiket parameter in the "/BusTicket-CI/tiket/cekorder" API endpoint. This allows for potential exploitation. No informati...

WordPress Simple Google Sitemap Plugin <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Simple Google Sitemap versions = 1.6...

WordPress WP Sitemap plugin <= 1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by theviper17 in WordPress Plugin WP Sitemap versions = 1.0...

CVE-2025-27312 WordPress WP Sitemap plugin <= 1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jenst WP Sitemap wp-sitemap allows SQL Injection.This issue affects WP Sitemap: from n/a through = 1.0...

SourceCodester Best Church Management Software 代码问题漏洞

SourceCodester Best Church Management Software is an open source church management software from SourceCodester. A code issue vulnerability exists in version 1.0 of SourceCodester Best Church Management Software, which stems from an incorrect manipulation of the parameter photo1 resulting in...

Edimax BR-6288ACL 代码注入漏洞

Edimax BR-6288ACL is a wireless router from China Xunzhou Edimax Company. A code injection vulnerability exists in the Edimax BR-6288ACL version 1.30, which stems from a cross-site scripting issue contained in the SSID parameter of the wireless5gbasic.asp file, which could lead to a remote attack...

WordPress plugin Erima Zarinpal Donate 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site request forge...

SourceCodester Best Church Management Software 安全漏洞

SourceCodester Best Church Management Software is an open source church management software from SourceCodester. A security vulnerability exists in SourceCodester Best Church Management Software version 1.0, which stems from a path traversal due to incorrect operation of the parameter oldcatimg...

CVE-2025-1593

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /hrsoft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to...

PT-2025-7659 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.0 Description: The issue concerns a cross-site scripting problem. It involves the "/admin/redirect.php" API endpoint. Recommendations: For SourceCodester Best Church Management Software...

PT-2025-7689 · Sourcecodester · Sourcecodester Best Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: A vulnerability was found in the Add Role Page component, specifically in the file /admin/Operations/Role.php. The issue is related to the manipulation of the assign...

PT-2025-7681 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A vulnerability was found in the code-projects Blood Bank System, affecting unknown code of the file /Blood/A-.php. The manipulation of the Bloodname argument leads to cross-site...

PT-2025-7672 · Sourcecodester · Sourcecodester Best Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: A vulnerability was found in the SourceCodester Best Employee Management System, affecting unknown code of the file /admin/backup/backups.php. This leads to information...

CVE-2025-26014

A Remote Code Execution RCE vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter...

CVE-2025-26013

An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component...

CVE-2025-26014

A Remote Code Execution RCE vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter...

PT-2025-7347 · WordPress · Tcbd Tooltip

Name of the Vulnerable Software and Affected Versions: TCBD Tooltip plugin for WordPress versions up to, and including, 1.0 Description: The TCBD Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tcbdtooltip text shortcode due to insufficient input...