CVE-2025-1436 Limit Bio <= 1.0 - Stored XSS via CSRF

The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-13430

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.8 via the 'pagelayerbuilderpostsshortcode' function due to insufficient restrictions on which posts can be included. This makes it...

WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Bee Layer Slider versions = 1.1...

WordPress BP Email Assign Templates By shanebp plugin <= 1.7 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by ch4r0n in WordPress Plugin BP Email Assign Templates versions = 1.7...

CVE-2025-28901 WordPress Members page only for logged in users plugin <= 1.4.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Naren Members page only for logged in users members-page-only-for-logged-in-users allows Stored XSS.This issue affects Members page only for logged in users: from n/a through = 1.4.2...

zzskzy Warehouse Refinement Management System 安全漏洞

zzskzy Warehouse Refinement Management System is a Warehouse Refinement Management System from Zhengzhou Time zzskzy Company in China. A security vulnerability exists in zzskzy Warehouse Refinement Management System version 1.3, which stems from an incorrect operation of the parameter showid that...

WordPress plugin Bee Layer Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Zhide Modern Farm Digital Integrated Management System 安全漏洞

Zhide Modern Farm Digital Integrated Management System is a modern farm digital integrated management system from Zhide, China. A security vulnerability exists in Zhide Modern Farm Digital Integrated Management System version 1.0, which originates from a vulnerability that could lead to the...

Projectworlds Life Insurance Management System 注入漏洞

Projectworlds Life Insurance Management System is a life insurance management system from Projectworlds India. An injection vulnerability exists in Projectworlds Life Insurance Management System version 1.0, which stems from improper manipulation of the key parameter and could lead to an SQL...

PHPGurukul Pre-School Enrollment System 安全漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System that stems from improper manipulation of the add-subadmin.php file in the Sub Admin Handler...

PHPGurukul Pre-School Enrollment System 注入漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System that stems from improper manipulation of the fullname/emailid/mobileNumber parameters, which cou...

Human Metapneumovirus (HMPV) – Testing Management System 代码注入漏洞

Human Metapneumovirus HMPV - Testing Management System is a PHP and MySQL based system developed to manage human lung virus testing. A code injection vulnerability exists in Human Metapneumovirus HMPV - Testing Management System version 1.0, which stems from improper manipulation of the...

student-manage 安全漏洞

student-manage is a student grade management system developed by the Chinese individual developer Huang Yongkang. A security vulnerability exists in huang-yk student-manage version 1.0, which stems from a possible cross-site request forgery issue...

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter donorid that can lead to SQL injection...

PHPGurukul Pre-School Enrollment System 注入漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System, which stems from the fact that incorrect manipulation of the parameters classname/capacity can...

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter memberid that can lead to SQL injection...

CVE-2025-25137

Cross-Site Request Forgery CSRF vulnerability in kareemsultan Social Links social-links allows Stored XSS.This issue affects Social Links: from n/a through = 1.0.11...

CVE-2025-1872

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php...

Projectworlds Online Hotel Booking System 注入漏洞

Projectworlds Online Hotel Booking System is an online hotel booking system from the Austrian company Projectworlds. An injection vulnerability exists in Projectworlds Online Hotel Booking System version 1.0, which stems from an incorrect operation of the parameter roomname that can lead to SQL...

Projectworlds Online Hotel Booking System 注入漏洞

Projectworlds Online Hotel Booking System is an online hotel booking system from the Austrian company Projectworlds. An injection vulnerability exists in Projectworlds Online Hotel Booking System version 1.0, which stems from an incorrect operation of the parameter checkin that can lead to SQL...