PT-2025-4083 · Code Projects · Code-Projects Simple Plugins Car Rental Management

Name of the Vulnerable Software and Affected Versions: code-projects Simple Plugins Car Rental Management version 1.0 Description: A critical issue has been found in the file "/admin/approve.php", where the manipulation of the id argument leads to SQL injection. The attack can be launched remotel...

WordPress Flexible Wishlist for WooCommerce plugin <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via wishlistname Parameter vulnerability discovered by Tim Coen in WordPress Plugin Flexible Wishlist for WooCommerce versions = 1.2.25...

needyamin SQL注入漏洞

needyamin is an open source library card borrowing system by needyamin. A SQL injection vulnerability exists in needyamin version 1.0, which stems from an incorrect manipulation of the email/password parameter that can lead to sql injection...

postorius -- XSS

NIST reports: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...

Code-Projects Job Recruitment 代码注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. A code injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from a cross-site scripting attack due to manipulation of the parameter jobtype...

Library Card System 注入漏洞

Library Card System is a library management system developed by Md. Yamin Hossain, an individual developer in Bangladesh. An injection vulnerability exists in Library Card System version 1.0, which stems from an incorrect manipulation of the email/password parameter that can lead to sql injection...

WordPress Dental Optimizer Patient Generator App plugin <= 1.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Dental Optimizer Patient Generator App versions = 1.0...

PT-2025-4948 · Cubepm · Cubepm

Name of the Vulnerable Software and Affected Versions: CubePM versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject malicious scripts in...

CVE-2025-24696 WordPress Gutenberg Blocks and Page Layouts Plugin <= 1.9.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Attire Attire Blocks allows Cross Site Request Forgery. This issue affects Attire Blocks: from n/a through 1.9.6...

WordPress MachForm Shortcode plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin MachForm Shortcode versions = 1.4.1...

CVE-2024-57328

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access...

PT-2025-5051 · Unknown · University Quizzes Online

Name of the Vulnerable Software and Affected Versions: Oleksandr Ustymenko University Quizzes Online versions n/a through 1.4 Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This means an attacker can inject malicious...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system from the personal developer Carlo Montero. A security vulnerability exists in Online Food Ordering System version 1.0, which arises from the input fields username and password not being properly cleaned, making it susceptible to SQL...

CVE-2025-23784

CVE-2025-23784 affects the WordPress plugin Contact Form 7 Round Robin Lead Distribution (vulnerable from n/a through 1.2.1). The issue is an SQL Injection due to improper neutralization of special elements in SQL commands, enabling attacker-controlled input to interfere with database queries. Th...

CVE-2025-23495

CVE-2025-23495 is a reflected Cross-Site Scripting vulnerability in the NotFound WooCommerce Order Search plugin for WordPress. The description indicates Improper Neutralization of Input During Web Page Generation, enabling reflected XSS. Affected range: WooCommerce Order Search plugins from n/a ...

PT-2025-5087 · Unknown · Wm Options Import Export

Name of the Vulnerable Software and Affected Versions: WM Options Import Export versions 1.0.1 and earlier Description: The issue allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This can potentially expose confidential information...

Jenkins plugin Azure Service Fabric 跨站请求伪造漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. Jenkins plugin A...

WordPress plugin UltraLight 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-1427 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A Null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "S1Setup Request" packet missing an expected Global eNB ID field...

itsourcecode Farm Management System 代码问题漏洞

itsourcecode Farm Management System is an open source farm management system from itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode Farm Management System, which stems from the pigphoto parameter of the file /add-pig.php that can lead to unrestricted uploads...