WordPress Ninja Job Board < 1.3.3 - Direct Request

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. id: CVE-2022-2544...

CVE-2023-1430

更新 2023-06-12: スニペットはもう必要ありません。WPManageNinja は公開開示から2時間後（報告から93日後）に脆弱性を修正しました。 更新 2024-01-27: 永続的なハッシュ値に関する関連問題は現在完全に解決されました。 WPManageNinja の FluentCRM における未修正脆弱性 CVE-2023-1430 の責任ある開示 tl;dr 攻撃者は FluentCRM 内の連絡先詳細を表示および編集できます。WPManageNinja...

CVE-2025-67971

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja FluentCart fluent-cart allows Reflected XSS.This issue affects FluentCart: from n/a through 1.3.0...

PT-2026-21045

Name of the Vulnerable Software and Affected Versions FluentCart versions prior to 1.3.0 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject...

CVE-2025-67971: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja FluentCart fluent-cart allows Reflected XSS.This issue affects FluentCart: from n/a through 1.3.0...

EUVD-2024-42340

Malicious code in bioql PyPI...

EUVD-2022-49912

Malicious code in bioql PyPI...

EUVD-2023-28466

Malicious code in bioql PyPI...

EUVD-2024-20998

Malicious code in bioql PyPI...

EUVD-2024-35396

Malicious code in bioql PyPI...

EUVD-2022-49911

Malicious code in bioql PyPI...

EUVD-2025-3929

Malicious code in bioql PyPI...

EUVD-2023-46411

Malicious code in bioql PyPI...

EUVD-2024-20999

Malicious code in bioql PyPI...

EUVD-2024-45600

Malicious code in bioql PyPI...

CVE-2024-47302

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.8.0...

CVE-2024-23503

Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6...

CVE-2023-51547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...

CVE-2023-41952

Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 5.0.8...

CVE-2023-24410

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin –...