PT-2026-7943

Name of the Vulnerable Software and Affected Versions Solspace Freeform plugin for Craft CMS versions 5.0 through 5.14.6 Description A low-privilege authenticated user with form creation/editing permissions can inject arbitrary HTML and JavaScript code into the Craft Control Panel builder and...

EUVD-2025-10805

Malicious code in bioql PyPI...

CVE-2025-52122

The Freeform plugin for CraftCMS (versions 5.0.0 to before 5.10.16 ) is vulnerable to Server-side template injection (SSTI) . The root cause is the improper handling of user input where the plugin implements a "call" Twig filter without sufficient validation on the form submission title field. An...

CVE-2024-55088

GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery SSRF in the backend plugin module...

WordPress plugin Headless CMS has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2022-24630 · WordPress · Wpml Multilingual Cms

Name of the Vulnerable Software and Affected Versions: WPML Multilingual CMS premium plugin versions = 4.5.10 Description: The issue allows users with subscriber or higher user roles to change the status of the translation jobs due to a Broken Access Control vulnerability in the WPML Multilingual...

PT-2014-2129

Name of the Vulnerable Software and Affected Versions Tribal Tribiq CMS versions prior to 5.2.7c Description The issue allows remote attackers to obtain sensitive information via a direct request to certain scripts, which reveals the full path in an error message. The affected scripts include...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...

CVE-2012-5387

Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...

PT-2012-5970

Name of the Vulnerable Software and Affected Versions White Label CMS plugin version 1.5 for WordPress Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML. This is achieved via the wlcms o developer name parameter in a sav...

PT-2012-5969

Name of the Vulnerable Software and Affected Versions White Label CMS plugin versions prior to 1.5.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms o developer nam...