7256 matches found
WordPress WP Customer Area plugin < 8.2.5 - Bulk Delete via CSRF vulnerability
Bulk Delete via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Customer Area versions 8.2.5...
WordPress Payment Gateway Authorize.Net CIM for WooCommerce plugin <= 2.1.2 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Payment Gateway Authorize.Net CIM for WooCommerce versions = 2.1.2...
PT-2025-53727
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available...
Small-Customer-Relationship-Management-CRM-in-PHP
No d...
CVE-2025-15074
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...
Malicious code in ing-feat-kyc-consent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ec1565e92d1ecffd4215be59b4dbd0d6a1e91be1511dab5c9b6ece1c202507 The package ing-feat-kyc-consent was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-205384
Malicious code in ing-feat-kyc-consent npm...
CVE-2025-68590
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a through = 1.4.2...
EUVD-2025-205361
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...
CVE-2025-15074
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...
CVE-2025-15074
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...
CVE-2025-15074 itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...
CVE-2025-15074 itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...
CVE-2025-15074
The CVE-2025-15074 affects itsourcecode Online Frozen Foods Ordering System 1.0, specifically the /customer_details.php file. The issue is a SQL injection vulnerability arising from unknown code manipulation, exploitable remotely over the network. The vulnerability is supported by multiple source...
itsourcecode Online Frozen Foods Ordering System SQL注入漏洞
itsourcecode Online Frozen Foods Ordering System is itsourcecode open source online frozen food ordering system . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Frozen Foods Ordering System, which stems from a misuse of unknown code in the file /customerdetails.php,...
PT-2025-53384
Name of the Vulnerable Software and Affected Versions itsourcecode Online Frozen Foods Ordering System version 1.0 Description A SQL injection issue exists in the itsourcecode Online Frozen Foods Ordering System version 1.0. The issue affects unknown code within the /customer details.php file...
The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices’ web servers allows a hacker to cause service interruptions.
The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices, which run on microprogramming software, is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
CVE-2025-15033
A vulnerability exists in the WooCommerce WordPress plugin, affecting versions 8.1 through 10.4.2 . This flaw allows authenticated customers to access order data belonging to guest customers on sites with specific configurations. The issue is resolved in version 10.4.3 and all affected versions f...
CVE-2025-9343: Improper Neutralization of Input During Web Page Generation
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ticket subjects in all versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...