4160 matches found
WordPress plugin Sticky Button 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
CVE-2024-57720
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...
CVE-2025-23758
CVE-2025-23758 affects the WordPress pootle-button plugin (NotFound Pootle button); vulnerability is a Reflected XSS in the plugin’s input handling, affecting versions up to 1.2.0. Exploitation details are not provided beyond the vulnerability type. Remediation: upgrade to version 1.2.0 or later ...
CVE-2025-22716
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows SQL Injection.This issue affects Taskbuilder: from n/a through = 3.0.6...
CVE-2025-22553
CVE-2025-22553 is a SQL Injection vulnerability affecting the WordPress plugin Multiple Carousel (versions up to 2.0). The issue stems from improper neutralization of specific elements in SQL commands, enabling unauthenticated attackers to potentially manipulate database queries. Public documents...
PT-2025-2840 · Arprice · Arprice
Name of the Vulnerable Software and Affected Versions: NotFound ARPrice versions n/a through 4.0.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for the injection of SQL code, potentially...
PHPGurukul Hospital Management System 安全漏洞
PHPGurukul Hospital Management System is an open source PHP and MySQL based hospital management system from PHPGurukul. A security vulnerability exists in PHPGurukul Hospital Management System version 4.0, which is vulnerable to cross-site scripting attacks...
PHPGurukul Hospital Management System 跨站脚本漏洞
Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in /edit-profile.php, which can be exploited by an...
NEC WebSAM DeploymentManager 安全漏洞
NEC WebSAM DeploymentManager is an application from Japan Electric NEC. It can remotely manage machines. A security vulnerability exists in NEC WebSAM DeploymentManager versions v6.0 through v6.80 that originated from allowing an attacker to reboot the product via an unspecified network reset...
PT-2025-3932 · WordPress · The Buzz Club – Night Club
Name of the Vulnerable Software and Affected Versions: The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme versions up to, and including, 2.0.4 Description: The issue allows unauthorized modification of data, potentially leading to a denial of service. This is due to a missing...
dingfanzu SQL injection vulnerability (CNVD-2025-02106)
dingfanzu is a php based takeaway ordering website. A SQL injection vulnerability exists in dingfanzu v1.0, which stems from the application's lack of validation of externally entered SQL statements. A local attacker can exploit this vulnerability to execute arbitrary code via the contents of the...
1000 Projects Campaign Management System Platform for Women 安全漏洞
1000 Projects Campaign Management System Platform for Women is an open source campaign management system platform from 1000 Projects. A security vulnerability exists in version 1.0 of the 1000 Projects Campaign Management System Platform for Women, which stems from a parameter uname in the file...
CVE-2025-23872
Cross-Site Request Forgery CSRF vulnerability in payform PayForm payform allows Stored XSS.This issue affects PayForm: from n/a through = 2.0...
CVE-2025-23664
Cross-Site Request Forgery CSRF vulnerability in Real Seguro Viagem Real Seguro Viagem seguro-viagem allows Stored XSS.This issue affects Real Seguro Viagem: from n/a through = 2.0.5...
WordPress PDF.js Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin PDF.js Shortcode versions = 1.0...
WordPress Daily Proverb plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Daily Proverb versions = 2.0.3...
WordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability
CSRF to Stored Cross Site Request Forgery CSRF vulnerability discovered by SOPROBRO in WordPress Plugin MHR-Custom-Anti-Copy versions = 2.0...
WordPress OrangeBox plugin <= 3.0.0 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin OrangeBox versions = 3.0.0...
WordPress WP Custom Google Search plugin <= 1.0 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP Custom Google Search versions = 1.0...