6735 matches found
WordPress Motta Addons plugin < 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Motta Addons versions 1.6.1...
WordPress Jaroti theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Jaroti versions 1.4.8...
WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pendulum versions 3.1.5...
WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Vex versions 1.2.9...
WordPress Kargo Takip plugin < 0.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Kargo Takip versions 0.2.4...
WordPress Lumise Product Designer plugin < 2.0.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Lumise Product Designer versions 2.0.9...
WordPress Scape theme < 1.5.16 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Scape versions 1.5.16...
WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Fusion Builder versions 3.15.0...
CVE-2026-33037
WWBN AVideo is an open source video platform. In versions 25.0 and below, the official Docker deployment files docker-compose.yml, env.example ship with the admin password set to "password", which is automatically used to seed the admin account during installation, meaning any instance deployed...
CVE-2026-23943 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23943 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23942 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23942 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
WordPress Get Use APIs plugin < 2.0.10 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Ahmed Makawi in WordPress Plugin JSON Content Importer versions 2.0.10...
CVE-2026-23941 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23941 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2025-12385 affecting package qt5-qtdeclarative for versions less than 5.12.5-6
CVE-2025-12385 affecting package qt5-qtdeclarative for versions less than 5.12.5-6. A patched version of the package is available...
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...
WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Or Benit in WordPress Plugin Hide My WP Ghost versions 7.0.00...
CVE-2025-71264
Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service client crash...
EUVD-2026-12005
Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through 5.15.0...