CVE-2025-12042: Missing Authorization

The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-export.php file in all versions up to, and including, 6.1.5. This makes it possible for unauthenticated attackers to directly access the file and obtain an expo...

PT-2022-11807

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.25.3 Description The issue is related to the lack of neutralization of formula elements in the CSV API, allowing an unprivileged attacker to execute code or gain access to information when a user opens a generated...