183 matches found
WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Hostel versions = 1.1.5.5...
CVE-2025-30567
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...
CVE-2025-28939
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows Blind SQL Injection.This issue affects WP Google Calendar Manager: from n/a through = 2.1...
CVE-2025-26747
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 99colorthemes RainbowNews allows Stored XSS.This issue affects RainbowNews: from n/a through 1.0.7...
CVE-2025-30567
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through = 2.6.2...
CVE-2025-26895 WordPress m1.DownloadList plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows DOM-Based XSS.This issue affects m1.DownloadList: from n/a through = 0.19...
CVE-2024-45828 affecting package kernel for versions less than 6.6.76.1-1
CVE-2024-45828 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...
WordPress plugin Qubely 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2025-27646
CVE-2025-27646 affects Version: Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.913 and Application 20.0.2253. Root cause described as an access-control issue that allows an Edit User Account Exposure, implying potential disclosure of user account information. CVSS v3.1 ...
CVE-2025-26985
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through = 1.0.6...
CVE-2025-26991 WordPress WPPizza plugin <= 3.19.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ollybach WPPizza wppizza allows Reflected XSS.This issue affects WPPizza: from n/a through = 3.19.4...
CVE-2025-25513
Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...
CVE-2024-12916
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection. This issue affects Life4All: before 10.01.2025...
CVE-2024-12916
CVE-2024-12916 concerns an SQL Injection in Agito Computer’s Life4All before 10.01.2025. Connected sources confirm the root cause is improper neutralization of special elements in SQL commands, affecting Life4All installations prior to the stated version. The CVSS metrics indicate high impact acr...
CVE-2025-22631
CVE-2025-22631 : WordPress Marketing Automation plugin (up to v1.2.6.8) vulnerable to Reflected XSS due to improper input neutralization during web-page generation. CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L; base score 7.1 (HIGH). Patched status exists per sources; remediation/version ...
CVE-2025-24565 WordPress WP2LEADS plugin <= 3.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.3.3...
CVE-2025-25153
Cross-Site Request Forgery CSRF vulnerability in djjmz Simple Auto Tag simple-auto-tag allows Stored XSS.This issue affects Simple Auto Tag: from n/a through = 1.1...
CVE-2025-23823
Cross-Site Request Forgery CSRF vulnerability in jprintf CNZZ&51LA for WordPress cnzz51la-for-wordpress allows Cross Site Request Forgery.This issue affects CNZZ&51LA for WordPress: from n/a through = 1.0.1...
CVE-2025-22552
Cross-Site Request Forgery CSRF vulnerability in bnielsen Affiliate Disclosure Statement affiliate-disclosure-statement allows Cross Site Request Forgery.This issue affects Affiliate Disclosure Statement: from n/a through = 0.3...