CVE-2025-12399: Unrestricted Upload of File with Dangerous Type

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/file REST endpoint in all versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, wi...

EUVD-2023-58330

Malicious code in bioql PyPI...

EUVD-2024-51567

Malicious code in bioql PyPI...

EUVD-2024-54993

Malicious code in bioql PyPI...

EUVD-2023-56033

Malicious code in bioql PyPI...

EUVD-2023-58332

Malicious code in bioql PyPI...

EUVD-2023-56036

Malicious code in bioql PyPI...

EUVD-2023-56038

Malicious code in bioql PyPI...

WordPress CBX Restaurant Booking plugin cross-site request forgery attack vulnerability

WordPress CBX Restaurant Booking plugin is a restaurant booking plugin for WordPress websites that allows users to book restaurant seats online. The plugin supports online booking, instant confirmation, personalized notifications and other features that automate the booking process and reduce...

WordPress CBX Restaurant Booking plugin <= 1.2.1 - Plugin Reset via CSRF vulnerability

Plugin Reset via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin CBX Restaurant Booking versions = 1.2.1...

CVE-2025-7965

The CBX Restaurant Booking WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2025-7965 CBX Restaurant Booking <= 1.2.1 - Plugin Reset via CSRF

The CBX Restaurant Booking WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2025-7965

The CBX Restaurant Booking WordPress plugin, affecting versions through 1.2.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of adequate validation to ensure requests originate from a trusted source when updating plugin settings. An attacker could exploit ...

CVE-2025-7965 CBX Restaurant Booking <= 1.2.1 - Plugin Reset via CSRF

The CBX Restaurant Booking WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2025-7965: Cross-Site Request Forgery (CSRF)

The CBX Restaurant Booking WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress plugin CBX Restaurant Booking 安全漏洞

WordPress CBX Restaurant Booking plugin is a restaurant booking plugin for WordPress websites that allows users to book restaurant seats online. The plugin supports online booking, instant confirmation, personalized notifications and other features that automate the booking process and reduce...

CVE-2025-5974

A vulnerability, which was classified as problematic, has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this issue is some unknown functionality of the file /check-status.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be...

CVE-2025-5972

CVE-2025-5972 affects PHPGurukul Restaurant Table Booking System v1.0. The vulnerability exists in the /admin/manage-subadmins.php file, specifically in the manipulation of the fullname parameter, which leads to cross-site scripting (XSS). Multiple sources (CNVD/CNNVD, RH, NVD, CVE records) descr...

CVE-2025-5970 PHPGurukul Restaurant Table Booking System add-subadmin.php cross site scripting

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

PHPGurukul Restaurant Table Booking System 代码注入漏洞

PHPGurukul Restaurant Table Booking System is a restaurant table booking system from PHPGurukul. A code injection vulnerability exists in version 1.0 of the PHPGurukul Restaurant Table Booking System, which originates from a cross-site scripting attack due to the incorrect operation of the...